


Specify a short message to the user that explains how and where they can retrieve their personal recovery key. When Enable FileVault is set to Yes, a personal recovery key is generated for the device during encryption and the following settings apply to that key:Įscrow location description of personal recovery key You can enable Full Disk Encryption using XTS-AES 128 with FileVault on devices that run macOS 10.13 and later.

As of macOS 10.15, FileVault configuration requires user approved MDM enrollment.
