FileVault

Learn what FileVault is and how to enable macOS full-disk encryption during the Setup Assistant with Microsoft Intune to protect data on managed Macs.

FileVault is macOS's built-in full-disk encryption feature, protecting data at rest so it cannot be read if a device is lost or stolen. This section covers what FileVault is, how to enable it during the Setup Assistant with Intune, and the insights you need to manage encryption and recovery keys in production. It is aimed at IT administrators responsible for endpoint security and compliance on macOS.

Begin with the overview, then follow the setup guide and review the field insights.

• What is FileVault? — Key features and benefits of macOS built-in disk encryption.
• Enable FileVault in Setup Assistant — Prerequisites, configuration profiles, and best practices.
• Insights — Advanced topics, troubleshooting, and expert recommendations.