Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-13-2023 07:07 PM
Hi Everyone,
I'm seeking for help on how to decrypt the drive on MAC OS after the encrypting the drive using the Cortex XDR Tenant/Console?
I tried to check and use on this documentation guide by Palo Alto Networks but I think it is not working or do I miss something.
Hoping for your best answers!
Thank you and best regards!
11-13-2023 11:46 PM
Hello,
Thank you for writing to Live Community.
Please refer below document for the further reference.
The Cortex XDR Disk Encryption profile for Mac can encrypt the endpoint disk, however, it cannot decrypt it. After you disable the Cortex XDR policy rule on the endpoint, you can decrypt the endpoint manually.
Hope this helps.
Please mark the response as "Accept as Solution" if it answers your query.
11-16-2023 03:29 AM
You may run sudo fdesetup disable to decrypt the disk in mac with admin permissions and to check status run the following command sudo fdesetup status.
Feel free to write back if you have further query.
Hope this helps!
Please mark the response as "Accept as Solution" if it answers your query.
11-18-2023 02:50 AM
Thanks for helping me out as well. Please mark it as a solution. Thanks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
