Issues deploying Filevault 2 to MacOS devices via Meraki Systems Manager

[Jose-MK1]

Hello, I'm trying to follow this Meraki documentation to set up FileVault on all my MacOS devices, but I'm having issues.

https://documentation.meraki.com/SM/Profiles_and_Settings/Using_File_Vault_2 

I'm trying to do method 3 of having both the Institutional and Personal Recovery Keys and using Meraki for the FileVault key escrow to store Personal Recovery Keys. I was able to follow the directions to create a self-signed certificate and create a profile for it that included the FileVault Recovery Key Escrow config. I got that profile installed onto my test units. However, when I try to create the other profile to actually enable FileVault on the endpoint I keep receiving "Error: The operation couldn't be completed (CPDomainPlugin error 101.) in the Activity log for installing that profile.

I opened a ticket with Meraki Support, but they haven't been able to tell me why this error is occurring or how to resolve it. Has anyone else encountered this issue or implemented FileVault through the Systems Manager before here? 

[BlakeRichardson]

I know many people are moving away from institution keys, Jamf recommend against using them. 

[Jose-MK1 · Accepted solution]

I was able to eventually fix this by changing the option under FileVault > Defer Settings > Maximum number of times users can by pass enabling FileVault before being required to enable it to login from -1 to 0. After I made this change the FileVault profiles installed without issue and I no longer received the CPDomain error.