Skip to content

Commit 03647a2

Browse files
rtroutonrtrouton
committed
Updating FileVault 2 check script, Extension Attribute for Casper and Custom Info Item for Absolute Manage
Updating FileVault 2 check script, with associated Extension Attribute for Casper and Custom Info Item for Absolute Manage. Script has been updated for 10.11.x.
1 parent 4ba0dc2 commit 03647a2

File tree

3 files changed

+126
-39
lines changed

3 files changed

+126
-39
lines changed

‎rtrouton_scripts/Absolute_Manage_Custom_Info_Items/FileVault_2_Encryption_Check/FileVault_2_Encryption_Check.sh‎

Lines changed: 43 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -129,10 +129,12 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
129129

130130

131131
# This section does checking of the Mac's FileVault 2 status
132-
# on 10.8.x and higher
132+
# on 10.8.x through 10.10.x
133133

134-
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]]; then
135-
if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then
134+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]] && [[ ${osvers_minor} -lt 11 ]]; then
135+
if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then
136+
echo "FileVault 2 Encryption Not Enabled"
137+
elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then
136138
diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {print $3;exit}' >> $ENCRYPTSTATUS
137139
if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then
138140
echo "FileVault 2 Encryption Complete"
@@ -141,21 +143,48 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
141143
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {print $3;exit}' >> $ENCRYPTDIRECTION
142144
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
143145
echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted"
144-
145146
else
146-
if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
147+
if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
147148
echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted"
148-
elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then
149-
echo "FileVault 2 Decryption Completed"
150-
fi
149+
elif grep -iE 'none' $ENCRYPTDIRECTION 1>/dev/null; then
150+
echo "FileVault 2 Decryption Completed"
151+
fi
151152
fi
152-
fi
153-
fi
154-
fi
155-
if [ "$ENCRYPTIONEXTENTS" = "No" ]; then
156-
echo "FileVault 2 Encryption Not Enabled"
153+
fi
154+
fi
157155
fi
158-
fi
156+
fi
157+
158+
# This section does checking of the Mac's FileVault 2 status
159+
# on 10.11.x and higher
160+
161+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 11 ]]; then
162+
if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "" ]]; then
163+
echo "FileVault 2 Encryption Not Enabled"
164+
elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "Complete" ]]; then
165+
echo "FileVault 2 Decryption Completed"
166+
elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then
167+
diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {print $4,$5;exit}' >> $ENCRYPTSTATUS
168+
if grep -iE 'Fully Secure' $ENCRYPTSTATUS 1>/dev/null; then
169+
echo "FileVault 2 Encryption Complete"
170+
else
171+
if grep -iE 'Not Fully' $ENCRYPTSTATUS 1>/dev/null; then
172+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') != "" ]]; then
173+
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {print $4;exit}' >> $ENCRYPTDIRECTION
174+
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
175+
echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted"
176+
elif grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
177+
echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted"
178+
fi
179+
elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') == "" ]]; then
180+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $3;exit}') == "Complete" ]]; then
181+
echo "FileVault 2 Decryption Completed"
182+
fi
183+
fi
184+
fi
185+
fi
186+
fi
187+
fi
159188

160189
# Remove the temp files created during the script
161190

‎rtrouton_scripts/Casper_Extension_Attributes/filevault_2_encryption_check/filevault_2_encryption_check_extension_attribute.sh‎

Lines changed: 40 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -129,10 +129,12 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
129129

130130

131131
# This section does checking of the Mac's FileVault 2 status
132-
# on 10.8.x and higher
132+
# on 10.8.x through 10.10.x
133133

134-
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]]; then
135-
if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then
134+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]] && [[ ${osvers_minor} -lt 11 ]]; then
135+
if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then
136+
echo "<result>FileVault 2 Encryption Not Enabled</result>"
137+
elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then
136138
diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {print $3;exit}' >> $ENCRYPTSTATUS
137139
if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then
138140
echo "<result>FileVault 2 Encryption Complete</result>"
@@ -141,21 +143,48 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
141143
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {print $3;exit}' >> $ENCRYPTDIRECTION
142144
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
143145
echo "<result>FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted</result>"
144-
145146
else
146147
if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
147148
echo "<result>FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted</result>"
148149
elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then
149150
echo "<result>FileVault 2 Decryption Completed</result>"
150-
fi
151+
fi
151152
fi
152-
fi
153-
fi
154-
fi
155-
if [ "$ENCRYPTIONEXTENTS" = "No" ]; then
156-
echo "<result>FileVault 2 Encryption Not Enabled</result>"
153+
fi
154+
fi
157155
fi
158-
fi
156+
fi
157+
158+
# This section does checking of the Mac's FileVault 2 status
159+
# on 10.11.x and higher
160+
161+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 11 ]]; then
162+
if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "" ]]; then
163+
echo "<result>FileVault 2 Encryption Not Enabled</result>"
164+
elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "Complete" ]]; then
165+
echo "<result>FileVault 2 Decryption Completed</result>"
166+
elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then
167+
diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {print $4,$5;exit}' >> $ENCRYPTSTATUS
168+
if grep -iE 'Fully Secure' $ENCRYPTSTATUS 1>/dev/null; then
169+
echo "<result>FileVault 2 Encryption Complete</result>"
170+
else
171+
if grep -iE 'Not Fully' $ENCRYPTSTATUS 1>/dev/null; then
172+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') != "" ]]; then
173+
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {print $4;exit}' >> $ENCRYPTDIRECTION
174+
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
175+
echo "<result>FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted</result>"
176+
elif grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
177+
echo "<result>FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted</result>"
178+
fi
179+
elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') == "" ]]; then
180+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $3;exit}') == "Complete" ]]; then
181+
echo "<result>FileVault 2 Decryption Completed</result>"
182+
fi
183+
fi
184+
fi
185+
fi
186+
fi
187+
fi
159188

160189
# Remove the temp files created during the script
161190

‎rtrouton_scripts/filevault_2_encryption_check/filevault_2_status_check.sh‎

Lines changed: 43 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -129,10 +129,12 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
129129

130130

131131
# This section does checking of the Mac's FileVault 2 status
132-
# on 10.8.x and higher
132+
# on 10.8.x through 10.10.x
133133

134-
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]]; then
135-
if [ "$ENCRYPTIONEXTENTS" = "Yes" ]; then
134+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 8 ]] && [[ ${osvers_minor} -lt 11 ]]; then
135+
if [[ "$ENCRYPTIONEXTENTS" = "No" ]]; then
136+
echo "FileVault 2 Encryption Not Enabled"
137+
elif [[ "$ENCRYPTIONEXTENTS" = "Yes" ]]; then
136138
diskutil cs list $LV_FAMILY_UUID | awk '/Fully Secure/ {print $3;exit}' >> $ENCRYPTSTATUS
137139
if grep -iE 'Yes' $ENCRYPTSTATUS 1>/dev/null; then
138140
echo "FileVault 2 Encryption Complete"
@@ -141,21 +143,48 @@ if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 7 ]]; then
141143
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Direction/ {print $3;exit}' >> $ENCRYPTDIRECTION
142144
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
143145
echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted"
144-
145146
else
146-
if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
147+
if grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
147148
echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted"
148-
elif grep -iE '-none-' $ENCRYPTDIRECTION 1>/dev/null; then
149-
echo "FileVault 2 Decryption Completed"
150-
fi
149+
elif grep -iE 'none' $ENCRYPTDIRECTION 1>/dev/null; then
150+
echo "FileVault 2 Decryption Completed"
151+
fi
151152
fi
152-
fi
153-
fi
154-
fi
155-
if [ "$ENCRYPTIONEXTENTS" = "No" ]; then
156-
echo "FileVault 2 Encryption Not Enabled"
153+
fi
154+
fi
157155
fi
158-
fi
156+
fi
157+
158+
# This section does checking of the Mac's FileVault 2 status
159+
# on 10.11.x and higher
160+
161+
if [[ ${osvers_major} -eq 10 ]] && [[ ${osvers_minor} -ge 11 ]]; then
162+
if [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "" ]]; then
163+
echo "FileVault 2 Encryption Not Enabled"
164+
elif [[ "$ENCRYPTION" = "None" ]] && [[ $(diskutil cs list "$LV_UUID" | awk '/Conversion Progress/ {print $3;exit}') == "Complete" ]]; then
165+
echo "FileVault 2 Decryption Completed"
166+
elif [[ "$ENCRYPTION" = "AES-XTS" ]]; then
167+
diskutil cs list $LV_FAMILY_UUID | awk '/High Level Queries/ {print $4,$5;exit}' >> $ENCRYPTSTATUS
168+
if grep -iE 'Fully Secure' $ENCRYPTSTATUS 1>/dev/null; then
169+
echo "FileVault 2 Encryption Complete"
170+
else
171+
if grep -iE 'Not Fully' $ENCRYPTSTATUS 1>/dev/null; then
172+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') != "" ]]; then
173+
diskutil cs list $LV_FAMILY_UUID | awk '/Conversion Status/ {print $4;exit}' >> $ENCRYPTDIRECTION
174+
if grep -iE 'forward' $ENCRYPTDIRECTION 1>/dev/null; then
175+
echo "FileVault 2 Encryption Proceeding. $CONVERTED of $SIZE Encrypted"
176+
elif grep -iE 'backward' $ENCRYPTDIRECTION 1>/dev/null; then
177+
echo "FileVault 2 Decryption Proceeding. $CONVERTED of $SIZE Decrypted"
178+
fi
179+
elif [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $4;exit}') == "" ]]; then
180+
if [[ $(diskutil cs list "$LV_FAMILY_UUID" | awk '/Conversion Status/ {print $3;exit}') == "Complete" ]]; then
181+
echo "FileVault 2 Decryption Completed"
182+
fi
183+
fi
184+
fi
185+
fi
186+
fi
187+
fi
159188

160189
# Remove the temp files created during the script
161190

0 commit comments

Comments
 (0)