Smart Group showing machines without filevault key escrowed

[RogerH]

I want to be able to identify machines where filevault is enabled but the fileVault key isn't escrowed in the JSS. Does anyone know a way to report this? I don't need the key just need to know if its present or not.

Thanks

[dan-snelson · Accepted solution]

@RogerH A Smart Group with the following criteria may help:

FileVault 2 Individual Key Validation > is not > Valid

[dan-snelson]

Also, you may want to review Extension attribute for FileVault 2 status.

[RogerH]

@dan.snelson Perfect thanks!