Part 3 File Systems: Lesson 11

Question 0

What are the system requirements for using FileVault 2?

Answer 0

To enable FileVault 2, OS X systems must have the hidden OS X recovery HD volume on the system disk. Further any legacy FileVault accounts must be decrypted and returned to normal accounts.

Question 1

How does FileVault 2 protect a user’s data?

Answer 1

FileVault 2 protects the entire system volume and all of its data by using strong XTS – AES 128 encryption. During system startup, FileVault enabled users must enter their password to decrypt the system volume.

Question 2

Which users are allowed to unlock a FileVault 2 protected system?

Answer 2

Any user that is FileVault 2 enabled is able to unlock a FileVault 2 protected system. This includes any local or cached network user account that was enabled when FileVault 2 was set up or created after FileVault 2 was enabled. Further, administrators may return to the Security & Privacy preference pane to enable additional accounts.

Question 3

How can you unlock the FileVault 2 protected system when all user accounts have lost their passwords?

Answer 3

A FileVault 2 protected system can be unlocked using the recovery key that was generated during the FileVault 2 set up process. This key can be entered during system startup, and allows you to reset the user’s
account password.