Apple's whole-disk encryption for Macs. Intune manages it through the settings catalog or an endpoint security disk encryption profile, provided the Mac's MDM enrolment was user-approved.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains FileVault in context, with comparison tables and the common traps.
Terms in this definition
- Encryption
Scrambling data so it cannot be read without the correct secret key, which is then used to turn it back again. Hashing, by contrast, cannot be reversed.
- Intune
Microsoft's device management service, once branded Microsoft Endpoint Manager. Its compliance policies are what the compliant-device grant in Conditional Access relies on.
- Settings catalog
A kind of Intune profile that puts all available settings into a single list you can search. It replaces picking from predefined templates.
- MDM
Mobile device management: a service such as Microsoft Intune controlling the settings, security and apps of enrolled devices. Intune can push Defender configuration this way using Policy CSP and OMA-URI.
Related terms
- Rotate FileVault recovery key
Issues a fresh personal recovery key for FileVault on a Mac the organisation owns, triggered from Intune.
- XTS-AES
A cipher mode used for disk encryption. FileVault always applies it with 128-bit keys.