Managing Yosemite's FileVault 2 with fdesetup

摘要

In Yosemite, Apple has continued the evolution of the fdesetup tool to add even more functionality, fdesetup in Yosemite can enable FileVault 2, add and remove users from the list of FileVault 2 authorized accounts, manage recovery keys, report on FileVault 2's status and more. Among its greatest strengths are: It allows options for automating FileVault 2 setups via scripting. fdesetup's defer option can be used to set up a self-service procedure for enabling encryption either at login or logout. It supports multiple recovery keys for FileVault 2, giving Mac admins more options for handling recovery situations. It allows you to rotate or remove recovery keys on an as-needed basis.