...
- FileVault 2 Disk Encryption is enabled on the boot drive of the computer.
- On computer restart, users will be presented with the FileVault 2 login screen.
- Only "enabled" users will be allowed to login to the computer.
- Active Directory groups are not supported by FileVault 2.
- Password changes
- When a user changes their NetID password (via login.biola.edu, for example), the password is scripted to sync with the computer, so on next boot the will enter their new password.
- Users will have to update their keychain password after login by entering their old password.
- If the new password doesn't work for some reason (indicating the scripted sync didn't work), users should login while plugged-in vie ethernet cable. Logging in with the old password will then get the user past the FileVault 2 login screen, but will not get past the OS login screen as it normally does. The user will then need to login again, using the new password. This will then force a sync.
- When a user changes their NetID password (via login.biola.edu, for example), the password is scripted to sync with the computer, so on next boot the will enter their new password.
- Helpdesk Support
- When a user needs help from the Helpdesk, a Helpdesk technician will first need to enable the IT Helpdesk user account to get past the FileVault 2 login screen.