Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Jose-MK1
Jose-MK1
Here to help
Member since Jan 12, 2022
Oct 2 2022
Community Record
7
Posts
5
Kudos
2
Solutions
Badges
Sep 28 2022
11:31 AM
For reference, here's some screenshots of what it looks like when FileVault is enabled without the PRK Key Escrow working and with it working.
... View more
Sep 28 2022
11:25 AM
Working on a project to deploy FileVault + PRK Key Escrow to all MacOS endpoints. Problem is some endpoints either FileVault encrypted before receiving the Key Escrow profile or they just never sent the Recovery Key to Meraki. I know I can create a Security Policy that detects if a MacOS endpoint is encrypted and also in the Devices page add a column and sort based on encryption status on/off. But I want to sort/filter on specifically FileVault enabled encrypted devices that do not have their key stored in the Meraki Key Escrow. Does anyone know a way to do this?
... View more
Labels:
- Labels:
-
macOS
Jun 15 2022
3:54 PM
1 Kudo
I was able to eventually fix this by changing the option under FileVault > Defer Settings > Maximum number of times users can by pass enabling FileVault before being required to enable it to login from -1 to 0. After I made this change the FileVault profiles installed without issue and I no longer received the CPDomain error.
... View more
May 31 2022
2:36 PM
Hello, I'm trying to follow this Meraki documentation to set up FileVault on all my MacOS devices, but I'm having issues. https://documentation.meraki.com/SM/Profiles_and_Settings/Using_File_Vault_2 I'm trying to do method 3 of having both the Institutional and Personal Recovery Keys and using Meraki for the FileVault key escrow to store Personal Recovery Keys. I was able to follow the directions to create a self-signed certificate and create a profile for it that included the FileVault Recovery Key Escrow config. I got that profile installed onto my test units. However, when I try to create the other profile to actually enable FileVault on the endpoint I keep receiving "Error: The operation couldn't be completed (CPDomainPlugin error 101.) in the Activity log for installing that profile. I opened a ticket with Meraki Support, but they haven't been able to tell me why this error is occurring or how to resolve it. Has anyone else encountered this issue or implemented FileVault through the Systems Manager before here?
... View more
Jan 18 2022
1:59 PM
2 Kudos
The permissions ended up appearing later in the day on the same endpoints and the support tech confirmed that scanning and diagnostic logs looked normal.
... View more
Jan 13 2022
12:53 PM
2 Kudos
The Malwarebytes Support tech reached out to me this morning with the suggestion to convert the .pkg file to a .dmg file and try again. I converted a folder with the .pkg file into a .dmg file, created a new app profile in Meraki Systems Manager, uninstalled on my test laptop and installed via the new app profile and it worked! All the apps installed that previously had not installed and I now get the "Start Threat scan option." The only thing I can think of that's missing is a lack of the Malwarebytes permissions in the Full Disk Access folder. Do you think this could cause any issues regarding the protection/functionality of the product?
... View more
Jan 12 2022
5:39 PM
I'm trying to deploy Malwarebytes to our organization via Meraki Systems Manager MDM. Found this document that says I need to provide kernal extension and approve Full Disk Access via the MDM and they provided a Malwarebytes_Protection_profile_10_15.mobileconfig file that is supposed to set up that configuration. https://support.malwarebytes.com/hc/en-us/articles/360047842193--Remotely-deploy-Malwarebytes-Endpoint-Agent-to-Macs-using-UAMDM https://support.malwarebytes.com/hc/en-us/articles/360039025573-Approve-kernel-security-framework-extension-for-Malwarebytes-Endpoint-Protection-on-Mac-devices https://support.malwarebytes.com/hc/en-us/articles/360047485253 So I made sure that device was tagged and the profile deployed, then created an App profile to deploy the custom app using the install file from my Malwarebytes Dashboard. But after that the Malwarebytes only partially installs. The full install shows this: But on my test laptops I only get these installed. Also on the manual install I see these permissions under Privacy, but not on my test laptop that was deployed via Meraki Systems Manager. Any ideas for troubleshooting? I've created Support Tickets with both Meraki Systems Manager Support and Malwarebytes Support but no luck resolving it yet. Any help is appreciated, thank you.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 764 | Jun 15 2022 3:54 PM | |
| 863 | Jan 13 2022 12:53 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 828 | |
| 2 | 863 | |
| 1 | 764 |
© 2024 Cisco Systems, Inc.
