Decryption key is not provided when enabling macOS 10.13 "High Sierra" drive encryption via Symantec Endpoint Protection Cloud (SEPC) security policy. In older macOS versions (10.12 and older) the key is normally made visible on the device when encyption starts and can also be viewed in the SEPC management portal, but this is not the case with macOS 10.13.
The decryption key storage technology has changed with macOS 10.13 High Sierra and the SEPC product will need to be modified to accomodate it.
This has been resolved in the current version of SEPC and FileVault encryption should work as expected.
Subscribing will provide email updates when this Article is updated. Login is required.