# FDEFileVault The payload that configures FileVault. ``` object FDEFileVault ``` ## Discussion Specify `com.apple.MCX.FileVault2` as the payload type. FileVault 2 performs full XTS-AES 128 encryption on the contents of a volume. Removing the FileVault payload doesn’t disable FileVault. As of macOS 10.15, FileVault settings require supervision or user approval when installed manually. ### Profile availability ||| |--------------------------|-----| |Device channel |macOS| |User channel |N/A | |Allow manual install |macOS| |Requires supervision |N/A | |Requires user-approved MDM|macOS| |Allowed in user enrollment|N/A | |Allow multiple payloads |N/A | ### Profile example ```plist PayloadContent Defer Enable On ShowRecoveryKey UseKeychain UseRecoveryKey UserEntersMissingInfo PayloadIdentifier com.example.myfdefilevaultpayload PayloadType com.apple.MCX.FileVault2 PayloadUUID c2c5f5e9-8ffc-4d8f-9108-fd655b90fdb2 PayloadVersion 1 PayloadDisplayName FDE File Vault PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID 5ba0de0e-ff06-4c0b-8dca-f5b55ed9de86 PayloadVersion 1 ``` --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)