Description
FileVault 2 profiles for Jamf Now expire two years after installation on managed Macs. Jamf Now should renew the FileVault profile automatically by default.
If a managed Mac has an expired certificate for FileVault, follow the steps below to generate a new certificate.
Note: These steps will not impact any Macs that are already encrypted and/or have their key stored in Jamf Now.
Generating a new FileVault Certificate
In Jamf Now, click Blueprints and select the blueprint that devices having this issue are assigned to.
Click Security and uncheck the box for Enable FileVault.
Click Save Changes.
Recheck the box for Enable FileVault on the Security tab of the blueprint.
Click Save Changes.
Once the Mac submits inventory to Jamf Now, it will receive the new FileVault profile pushed by Jamf Now.
More Resources
If a Mac impacted by this issue does not have the key stored in Jamf Now, you can always generate a new key following the steps in the Jamf Now documentation.