Wednesday, July 23, 2014

TIPS & TRICKS: OS X FileVault Encryption and Allowed Login Users

Learned something new today. Enabling whole-disk encryption via FileVault on OS X each user needs to be given specific permission to get into the machine when initially starting up a machine. This includes both local users, as well as directory-defined or network users. In the case of the network users, the network users must have a mobile account created when logging into the machine for the first time.


Saturday, July 05, 2014

TIPS & TRICKS: Trusting A Computer from iOS 7

Apple introduced concept of Trusted Computers in iOS 7. The idea is that if a iOS device (i.e. iPhone) is plugged into a computer for charging purposes only, the data on the iOS device can be kept safe from the computer while still allowing charging of the device.

I found a situation where I allowed the device to trust a computer and then needed to remove that trust relationship. Apple doesn't have an easy way to remove that trust relationship on the phone because it seems that the trust token is stored only on the computer that the device is connected. However, there is a way to remove that relationship, as outlined by Apple: http://support.apple.com/kb/TS5335. I've only tried these steps on Windows 7:


  • Choose Start, type %ProgramData% in the search bar, and press Return.
  • Double-click the Apple folder.
  • Double-click the Lockdown folder 
  • Find the appropriate token (I based it on date, if there are multiple tokens) and choose Delete. Admin credentials may need to be provided if the currently logged in user is a non-admin.