Jamf Pro Computer Extension Attribute - FileVault Decryption Status

[cainehorr]

Jamf Pro is really good at identifying and reporting on most things within OS X (macOS) and iOS. Unfortunately, Jamf Pro still doesn’t know everything. Lucky for us, we can teach this dog a new trick or two via Extension Attributes.

My recent challenge was to come up with a method to report against systems that are in a current state of decryption.

You might be thinking to yourself, “Jamf already knows how to report against this.” – You’re not wrong! But…

Jamf only let’s us know if a drive is decrypting. Unlike the encryption process, Jamf does not report the percentage complete of the decryption process.

So I wrote an Extension Attribute to meet this need.

Here's the full write up... http://www.cainehorr.com/jamf-pro-computer-extension-attribute-filevault-decryption-status/

Hope you find this Extension Attribute and workflow useful. Commentary is always welcome!

[rderewianko]

Rich also has a great model the above will work, but come 10.13 moving to APFS its a bit different.

https://derflounder.wordpress.com/2017/11/13/apfs-encryption-status-check-script/

For filevault he has:
https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/filevault_2_encryption_check

[cainehorr]

@rderewianko - Thanks! Trouton's script is far more sophisticated than my trivial script - that's for certain!

[cainehorr]

Took a look at Rich's script. I think I'll merge his into mine and that way it's backward compatible.