Editing FileVault (section)

==Starting the OS with FileVault 2 without a user account==
If a volume to be used for startup is erased and encrypted before clean installation of OS X 10.7.4 Lion or 10.8 Mountain Lion:

* there is a password for the volume
* the clean system will immediately behave as if FileVault was enabled ''after'' installation
* there is no recovery key, no option to store the key with Apple (but the system will behave as if a key was created)
* when the computer is started, ''Disk Password'' will appear at the EfiLoginUI – this may be used to unlock the volume and start the system
* the running system will present the traditional login window.

Apple describes this type of approach as ''Disk Password—based DEK''.<ref name="wpfv2">{{cite web|title=Best Practices for Deploying FileVault 2|url=http://training.apple.com/pdf/WP_FileVault2.pdf|publisher=Apple, Inc|access-date=September 5, 2012|author=Apple, Inc|page=28|date=August 17, 2012|archive-url=https://web.archive.org/web/20170822164742/http://training.apple.com/pdf/WP_FileVault2.pdf|archive-date=August 22, 2017|url-status=dead}}</ref>