Forums
New posts
Articles
Product Reviews
Policies
FAQ
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Menu
Log in
Register
Install the app
Install
Forums
General Discussions
Security Awareness
Secure FileVault 2 on sleep mode?
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="JustAnotherMac" data-source="post: 1812268" data-attributes="member: 401689"><p>Hello, I am the owner of a 2015 macbook pro 15" with SSD. What I am hoping to do is make is so that when i close the lid on my macbook, the SSD will be re-encrypted, requiring the encryption password to be unlocked again. i have tried the 'sudo sh -c pmset -a destroyfvkeyonstandby 1' command, but this does not seem to be working. The way I was able to confirm that it did not work is as follows;</p><p></p><p>I have 2 accounts on my MacBook; my administrator account, and a standard account without administrative privelages. My standard account does not have permission to decrypt filevault, and as such it does not show up on initial login after the macbook has been powered down. The only account the shows up from a cold boot is my admin account since this is the only account with filevault unlock privileges. So, from what i understand, if the filevault key was actually being destroyed from ram upon entering sleep mode, then I should only be able to re-log in from my administrator account upos waking the computer from sleep, just as required at the first login from a cold boot. Hiwever, this is not the case. When waking from sleep I am able to login from either my admin account, or the standard account.</p><p></p><p>If anyone could provide me with some insight as to how I can get filevault to re-encrypt upon the macbook entering sleep mode (destroy the encryption key from memory) it would be greatly appreciated! Thank you!</p></blockquote><p></p>
[QUOTE="JustAnotherMac, post: 1812268, member: 401689"] Hello, I am the owner of a 2015 macbook pro 15" with SSD. What I am hoping to do is make is so that when i close the lid on my macbook, the SSD will be re-encrypted, requiring the encryption password to be unlocked again. i have tried the 'sudo sh -c pmset -a destroyfvkeyonstandby 1' command, but this does not seem to be working. The way I was able to confirm that it did not work is as follows; I have 2 accounts on my MacBook; my administrator account, and a standard account without administrative privelages. My standard account does not have permission to decrypt filevault, and as such it does not show up on initial login after the macbook has been powered down. The only account the shows up from a cold boot is my admin account since this is the only account with filevault unlock privileges. So, from what i understand, if the filevault key was actually being destroyed from ram upon entering sleep mode, then I should only be able to re-log in from my administrator account upos waking the computer from sleep, just as required at the first login from a cold boot. Hiwever, this is not the case. When waking from sleep I am able to login from either my admin account, or the standard account. If anyone could provide me with some insight as to how I can get filevault to re-encrypt upon the macbook entering sleep mode (destroy the encryption key from memory) it would be greatly appreciated! Thank you! [/QUOTE]
Verification
Name this item 🌈
Post reply
Forums
General Discussions
Security Awareness
Secure FileVault 2 on sleep mode?
Top
