unlinking user's password of lion's filevault2 for WDE

02-26-2012, 12:35 PM

Hi ! I'm new here and I'm looking for some info about new filevault2 on osx 10.7 (lion)

I need to make a wde (encrypt hdd) of my mac.
Truecrypt is very good but there is no preboot for osx
PGP has it but there is something wrong with keyboard layout

Now there is filevault2 but seem it can only use user's login password for the WDE !!

I can create a user account only for the WDE password (different from user's login passwords) but seems that every user can unlock my hdd and I could not chose the only one I want to let unlock it...

Is there a way to setup a password for WDE different from user's password or to set only one users to do it?

Thanks.

I hope to find here a lot of help from experienced osx users ... bye...

fracai · 02-26-2012, 03:59 PM

Yes, you create a new admin account and set only that account as able to decrypt the disk.

http://support.apple.com/kb/HT4790

agentx · 02-27-2012, 05:19 AM

Just about all the in depth info on Filevault is over on a blog by a very accomplished system admin.
http://derflounder.wordpress.com/

I would urge looking at the whole process of FV2 in depth before deploying as things have changed a lot since FV1. I have a deployment soon which for more than one reason requires us to use FV2 and not to store encryption keys with Apple and have rock solid ability to decrypt users data if need be.

02-26-2012, 12:35 PM	#1
aid85 Guest Posts: n/a	unlinking user's password of lion's filevault2 for WDE Hi ! I'm new here and I'm looking for some info about new filevault2 on osx 10.7 (lion) I need to make a wde (encrypt hdd) of my mac. Truecrypt is very good but there is no preboot for osx PGP has it but there is something wrong with keyboard layout Now there is filevault2 but seem it can only use user's login password for the WDE !! I can create a user account only for the WDE password (different from user's login passwords) but seems that every user can unlock my hdd and I could not chose the only one I want to let unlock it... Is there a way to setup a password for WDE different from user's password or to set only one users to do it? Thanks. I hope to find here a lot of help from experienced osx users ... bye...

02-26-2012, 03:59 PM	#2
fracai MVP Join Date: May 2004 Posts: 2,012	Yes, you create a new admin account and set only that account as able to decrypt the disk. http://support.apple.com/kb/HT4790
$fracai is offline$

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

02-27-2012, 05:19 AM	#3
agentx Hall of Famer Join Date: Feb 2003 Location: Brighton, UK Posts: 3,811	Just about all the in depth info on Filevault is over on a blog by a very accomplished system admin. http://derflounder.wordpress.com/ I would urge looking at the whole process of FV2 in depth before deploying as things have changed a lot since FV1. I have a deployment soon which for more than one reason requires us to use FV2 and not to store encryption keys with Apple and have rock solid ability to decrypt users data if need be.