Skip to content Skip to navigation

Install Encryption for Macintosh


  • Before starting the installation, make sure your computer is on AC power and has an active network connection.
  • Whole Disk Encryption can take up to 10 hours, so you may want to install the the software at the end of the day and let the encryption run over night. You can use your computer during the encryption process, but certain activities may be noticeably slower.

When you run the Encryption installer, it first checks your computer to make sure certain requirements are met, such as having BigFix and Sophos Anti-Virus software installed. You will need to fix, or let the installer fix, any items that are flagged before continuing with the installation.

Once your computer has been authorized to install encryption, you will be presented with the options that are available for your computer.

  • McAfee Endpoint Encryption — this the only solution for computers running Mac OS X 10.5 or 10.6.  Note:  If your computer will run 10.9, you may wish to upgrade the OS so you can make use of FileVault.
  • FileVault Encryption — this is recommended for computers running Mac OS X 10.7 and later.  It uses Apple's built-in encryption technology to encrypt the whole disk. It is only available on systems running Mac OS X 10.7 and above.
    Note: OS X 10.8 and 10.9 provides an interface to manage FileVault that allows for the automation of storing recovery information for the encrypted drive. It's recommended that machines be upgraded to OS X 10.9 where possible.
    Note:  For machines running 10.7 that already have FileVault enabled, the SWDE installer will prompt you to enter your recovery key.  If you did not record your recovery key when you enabled FileVault you would need to decrypt and re-encrypt to obtain a new one.  See our manual activation instructions for assistance with the process.
  • Boot Camp:  Neither FileVault nor McAfee Endpoint Encryption will encrypt the Windows partition on systems running Boot Camp.  Therefore, SWDE-compliant machines cannot run Boot Camp.  OS X users needing to run Windows will need to use Vmware Fusion or Parallels.

Download whole disk encryption

Install whole disk encryption

Note: You are encouraged to contact your local support organization to make sure your system is being routinely backed up prior to running the SWDE installer.

  1. Launch the Encryption Installer.
  2. When the Welcome window is displayed, click Continue.

    Encryption Installer welcome screen
  3. When the policy agreement is displayed, read it and click Agree to accept the terms of the policy agreement and continue with the installation.

    policy agreement
  4. The installer runs a test on your computer to ensure that certain requirements are met before installing Encryption. For example, BigFix and Sophos Anti-Virus must be installed, some network services need to be disabled, etc. Click Fix Items to fix these problems.

    Note: If you need to install BigFix or Sophos Anti-Virus, you will be directed to another web site to download the software. After installing, close the browser and continue with the Encryption installation.

    test results with problems
    If the Test Results show that no items need to be fixed, click Continue.

    test results with no items to be fixed

Encryption Options

  1. Select the option you want to use to encrypt your whole disk and then click Install.
    • Install McAfee Endpoint Encryption: recommended for Mac OS X 10.5.8 and 10.6; your operating system does not support whole disk encryption with FileVault.
    • Enable FileVault: recommended for Mac OS X 10.7 and 10.8
    install encryption

Install McAfee Endpoint Encrypton

There are two parts installing McAfee Enpoint Encryption.

  1. Install the software.
  2. Contact your local support person to complete the final step necessary to encrypt your system.

See Using McAfee Endpoint Encryption for information on logging into your system with McAfee, and setting or resetting your password.

Enable FileVault on Mac OS X 10.7

You will need to configure FileVault encryption manually. See FileVault Encryption for instructions.

Enable FileVault on Mac OS X 10.8

  1. You will see a message saying that you will need to restart your computer after FileVault is enabled. Click Yes.

    restart message
  2. Enter your administrator name and password and then click OK.

    password prompt
  3. After FileVault is installed, your computer will restart. Enter your administrator name and password and then click OK.
  4. Your recovery key is displayed. You will need this to unlock your FileVault encryption if you forget your computer password. Make a copy of the recovery key and store it in a safe place. Then, click Close.

    recovery key
  5. A window will display showing the encryption status. Click Exit to close the window.
    Note: You can use your computer while it is being encrypted.

    encryption status

If you need help

  • If you encounter problems, please call (650) 725-4357 or submit a HelpSU request. This service is provided 24 X 7 by IT Services.
  • Removal of  McAfee Endpoint Encryption is a service that is available upon request. Please submit a HelpSU request to contact your local support representative who can initiate these actions from the server.
Last modified April 3, 2014