We've been using it. It works well.
This page shows how it looks from the user side:
This page shows how to get the recovery key:
You can't add an additional user when enabling, that's not an available function of the profile. That has to be done locally afterwards.
Phil C wrote:
If the encryption keys are lost and the user forgets his/her password, is there a backdoor access to the date or none?
No, unless you have another account enabled for FV.
The main con, is that there is no way (that I know of) to export all the keys should you ever decide to move away from LANrev. To recover a key, you have to have a bit of information from the local machine (as described in the above page). Even if you view the DB directly, the data is encoded.
Ultimately, these capabilities are all provided by Apple. Profile Manager, Casper, etc all have the same capabilities. The manner in which the keys are stored is the only difference.
Thank you so much for sharing your links and info here.
What a very informative site you got there. It was really very helpful!
I have now an understanding on how the process for enabling FileVault through LANRev profile works.
Few of our iMacs does not show the record number when rebooting and clicking the "?".
Although it says the the key is saved on LANRev server when we checked that particular iMac on LANRev Admin console.
Did you experience this when you implement your encryption?
I haven't seen that but honestly, we haven't checked all that much. Did these machines have FV2 enabled before getting the profile? (I'm pretty sure the profile has to be the one to handle the enabling from the start).
Yes, the machine was manually encrypted using system preferences. We however decrypt it fully then encrypt it back using the LANRev profile.
We have also some brand new fusion drives imacs that has the same issue not showing the record number. It would be scary if we can't retrieve the FV key.
We've confirmed that the issue of no record number showing is only happening to a fusion drive iMac.
I am not sure if anyone else has the same issue.