System information

69
Parallels Mac Management Features
When a Mac is evaluated for compliance, an attempt will be made to enable FileVault 2 on it. The
Mac user will be notified as follows:
1 A message box is displayed informing the user that the Mac is about to be encrypted. The
dialog has two buttons: Encrypt and Postpone.
2 If the user clicks Postpone, the encryption operation will be postponed. The dialog will be
displayed to the user again after a predefined period of time (five minutes). The user has the
ability to keep postponing the encryption indefinitely. The time period after which the dialog is
displayed again is doubled each time the user clicks Postpone, but never exceed one hour.
3 If the user clicks Encrypt, a window opens where the user must select one or more OS X user
accounts that will be allowed to unlock the disk. To select an account, the user needs to click
the Enable button next to the account name and then enter a password that will be used to
unlock an encrypted disk. The user must enable at least one account to continue.
4 When the necessary accounts are selected, the user clicks Encrypt to enable FileVault 2. The
user should then restart the Mac to encrypt the disk.
Viewing and Monitoring FileVault 2 Encryption Status
When the disk encryption operation is initiated on a Mac, the Parallels Mac Client begins reporting
the encryption status to the Parallels Configuration Manager Proxy. The current encryption status is
saved in the Mac's hardware inventory record in the Configuration Manager database and can be
viewed in the Configuration Manager console. If at some later point the Mac user (or a third-party
program) encrypts, decrypts, or re-encrypts the disk, the Parallels Mac Client running on a Mac will
detect it and the database record will be immediately updated.
You can view the FileVault 2 encryption status for a particular Mac or you can run a report and view
the information for all Macs in a single list.
Viewing the FileVault 2 Status for a Specific Mac
1 In the Configuration Manager console, open the collection containing your Mac resources (e.g.
All Mac OS X Systems).
2 Locate the Mac of interest, right-click it and select Start > Resource Explorer from the pop-up
menu. The ResourceExplorer snap-in opens.
3 In the resource tree, navigate to Hardware / FileVault 2 Disk Encryption. The encryption
information for the Mac is displayed in the right pane.
4 A single row of information represents a corresponding Mac volume and contains the following
columns:
• Key Type — the type of the recovery key that was assigned or created during encryption. The
possible values are:
• Unknown — the disk is not encrypted or the disk is encrypted by the Mac user or a third-
party (see the Status column).
• Personal — personal recovery key.