Allow Device Trust full disk encryption to specify software encryption (ie. FileVault)
Presently, when creating a Device Trust Policy that requires full disk encryption for Mac, there is no option to require FileVault as an additional requirement for full disk encryption. As a result, existing hardware encryption using Apple Silicon or a T2 chip satisfies the encryption requirement. It would be helpful to add this functionality so we can enforce FileVault as part of our device trust requirements.
1
vote