01 · Hardening area
Disk Encryption & Boot
A lost or stolen Mac is only a hardware loss if its data is unreadable. This area covers FileVault on Apple silicon and T2 Macs, personal and institutional recovery keys, escrowing keys to MDM, Startup Security policy and Activation Lock.
FileVaultfdesetupRecovery key
- FileVault on Apple Silicon: Encryption, Keys and Boot Security
How FileVault really works on Apple silicon and T2 Macs, how to enable and escrow recovery keys with fdesetup and MDM, and how to lock down startup security.