

This command will ask for the current user's password or the recovery key for the FileVault volume, and then store the current user's credentials so when the system is restarted the computer can use these credentials to unlock the volume at the preboot screen. To do this, open the Terminal and run the following command: Luckily, Apple does provide a way to restart a FileVault-encrypted system and have it boot back to a working state. In effect, this creates a bit of a hurdle for those who wish to keep their systems secure with FileVault but who also want to be able to restart their systems remotely. If you make a configuration change and need to restart the system, the computer will require preboot authentication before the system and any remote-access services load. Unfortunately, while more secure and while offering a relatively seamless experience when sitting at your computer, the preboot authentication requirement for FileVault does pose a bit of a problem for those who access their systems remotely, such as through Screen Sharing (using Back To My Mac) or through SSH and other remote-access technologies. With CoreStorage, the OS configures a small hidden partition with a preboot welcome screen that looks like the standard OS X log-in window and contains user accounts that are authorized to unlock the volume and cause the system to load and automatically log in to the account specified on the preboot screen.

In OS X Lion, FileVault now uses Apple's new CoreStorage volume manager to encrypt the entire disk. OS X's encryption service, FileVault, originally stored users' home folder contents in encrypted disk images.
