topic Re: FDESetup popup after Global Protect client update on macOS in GlobalProtect Discussions

FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Fri, 01 Nov 2024 21:46:33 GMT

Hello everyone,

After users update the Global Protect VPN client from version 6.2.4 to 6.2.5, all users get "fdesetup" popup on their macOS devices, please see the attached.

It does not matter if the user clicks OK or "Don't Allow", the popup comes back again and again and it is annoying. And by clicking OK, it actually does not encrypt the drive or do anything.

Looks like the command "fdesetup" is deprecated by Apple.

The only fix so far is to downgrade the client app back to 6.2.4.

Reference to the "fdesetup" command:

https://support.apple.com/guide/deployment/manage-filevault-with-mdm-dep0a2cb7686/web

Please advise.

Thanks,

Otar

Re: FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Fri, 01 Nov 2024 21:52:58 GMT

Additional screenshot for the process

Re: FDESetup popup after Global Protect client update on macOS

BPry — Fri, 01 Nov 2024 22:00:12 GMT

@Otar_Chomakhidze,

This appears to be a bug in GlobalProtect that you might want to report just so that they're getting more tickets about it and therefore more eyes onto the matter. So far, I've only been able to replicate the issue if you have FileVault disabled for some reason. I haven't had reports of this popping up when FileVault is enabled and I haven't been able to replicate on any FileVault enabled machines.

Re: FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Fri, 01 Nov 2024 22:17:16 GMT

That is correct, we are getting complaints only from the users who do not have FileVault enabled.

Re: FDESetup popup after Global Protect client update on macOS

Dirk_Melchers — Thu, 14 Nov 2024 08:22:44 GMT

Could this be the issue / fix in 6.2.6:
GPC-21247: Fixed an issue where GlobalProtect HIP set the Filevault encryption status to unencrypted on macOS running devices, which denied access to the end-point machines.

Re: FDESetup popup after Global Protect client update on macOS

JoeCheng — Mon, 18 Nov 2024 04:31:56 GMT

MacOS GlobalProtect upgraded 6.1.4 to 6.2.5.

I also encountered the same problem. ==It does not matter if the user clicks OK or "Don't Allow", the popup comes back again and again and it is annoying. And by clicking OK, it actually does not encrypt the drive or do anything.

Re: FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Mon, 18 Nov 2024 13:17:44 GMT

We decided to update the GP client to version 6.3 and it resolved an issue. Looks like 6.2.5 has a bug and in later versions it is fixed.

Re: FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Mon, 18 Nov 2024 13:22:09 GMT

Could be. We did not test that 6.2.6 version, we decided to go with version 6.3 and it resolved the issue, no more fdesetup popups since the update.

Re: FDESetup popup after Global Protect client update on macOS

gauntt — Mon, 16 Dec 2024 17:06:39 GMT

This solution does not work for me. The only download is from our company portal where 6.2 is the download. There doesn't appear to be anywhere to download an old build or force download 6.3.

Is there any other resolution to this? I have no control over the company portal.

Any way to download 6.3 directly? Any change to a config file somewhere to stop it checking for FileVault???

Re: FDESetup popup after Global Protect client update on macOS

Otar_Chomakhidze — Mon, 16 Dec 2024 19:37:55 GMT

I would recommend to ask your Cyber or Network team (whoever has access to the Palo Alto portal) and provide you with the 6.3 version or ask them to push 6.3 version via the portal update.