Brock Walters

I guess since it's community-sourced maybe our ongoing effort to keep it up-to-date is not as high as a product designed & built by Fleet? It's a good point @noahtalerman...

related: https://github.com/fleetdm/fleet/issues/7766 https://github.com/fleetdm/fleet/issues/15381 https://github.com/fleetdm/fleet/issues/11492

- customers would need to mark the cert as extractable and not sensitive in the keychain (so that the private key can be extracted) Does this mean setting the trust...

I guess I assume the key is sensitive though? Like, it should only be extractable by the service, not by any user (even admin) because it's a persistent API key...

https://www.linkedin.com/posts/microsoft-entra_join-brian-melton-grace-olga-dalton-and-activity-7155690107008675840-avOZ?utm_source=share&utm_medium=member_desktop

@noahtalerman @marko-lisica Has this been implemented or something like it? I am not sure I understand the user story. We are already escrowing the FV key on enroll, right? What...

Added customer-sarahwu label. See: customer-sarahwu "MDM requirements" doc.

Adding a little color... > Apple at WWDC 2023 announced the following improvements: > > macOS 14 allows MDM to require FileVault enablement during Setup Assistant. The recovery key can...

> > macOS 14 allows MDM to require FileVault enablement during Setup Assistant. > > > @nonpunctual do you know what the mechanisms is for these features? > > >...