System information

Parallels Mac Management Features

3 Look for the UUID of a Logical Volume, usually the last in the list. Select and copy the UUID to

be used in the next step.

4 Use the following command to unlock the encrypted disk. Be sure to insert the UUID from the

previous step:

$ diskutil cs unlockVolume UUID -passphrase recoverykey

5 When the command completes, the volume will be unlocked and mounted. You'll be able to

back up data using Disk Utility, or by using a command line tool such as ditto.

If the command fails, it is possible that the disk was re-encrypted by the Mac user or a third-

party program. You can compare the UUIDs of the volumes displayed by the diskutil cs

list command to the LVGUUID, LVUUID, and PVUUID values on the FileVault 2 tab of the

Mac Properties dialog (see the Retrieve Personal Recovery Key subsection above). The

values should match. If they don't, it means that the disk was re-encrypted, in which case the

recovery key stored in the Parallels Mac Management database will not work.

6 Once the disk is unlocked, you can decrypt it by running the following command:

$ diskutil cs decryptVolume UUID -passphrase recoverykey

Enforcing Parallels Desktop Preferences

If you have Parallels Desktop running on your Macs, you can monitor and enforce its preferences

by creating a Parallels Desktop configuration item and specifying the required values.

To create a Parallels Desktop configuration item:

1 In the Configuration Manager console, navigate to Assets and Compliance / Overview /

Compliance Settings.