DestroyFVKeyOnStandby and hibernatemode 3 on M1 Macs

Since the early days of FileVault I had been very successfully using a combination of DestroyFVKeyOnStandby, hibernatemode 3 and standbydelay in pmset to make it so my Mac would RAM sleep for 15 minutes and then drop to deep sleep with the FileVault keys destroyed so that I'd have to log into the disk again on wake.

Since I bought my M1 Mac last year, none of these work as they used to.

DestroyFVKeyOnStandby seems to have no effect as even with the Mac sent to disk hibernate with hibernatemode 25 I don't need to enter my password for the disk, only to login.

I understand the M1 Macs hold the disk keys in the T2 enclave securely, but I much prefer the full DestroyFVKeyOnStandby experience as the disk requires manual unlock.

A feature request would be the restoration of standbydelay so that this can be customised, but at the moment my Mac never actually gets there.

Many thanks,

James

DestroyFVKeyOnStandby and hibernatemode 3 on M1 Macs
 
 
Q