To pass the “Hard Drive Encryption” device check in ComplyJet, your device must have full disk encryption enabled.
Disk encryption protects sensitive company data in case a device is lost, stolen, or accessed without authorization.
These instructions apply only when using the ComplyJet Agent directly on the device.
If you are using an external MDM (Hexnode, Intune, Jamf, etc.), refer to the respective MDM setup guide instead.
ComplyJet evaluates the encryption status detected by the Agent.
Requirement Overview
To pass the check:
Full disk encryption must be enabled
The system drive must be encrypted
Encryption must be actively enforced (not paused or in progress indefinitely)
macOS Configuration (FileVault)
macOS uses FileVault for full disk encryption.
Steps to Enable FileVault
Open System Settings
Navigate to Privacy & Security
Scroll to FileVault
If FileVault is off, click Turn On FileVault
You may need to click the lock icon and authenticate to make changes
Follow the prompts to enable encryption
Once enabled:
FileVault will begin encrypting your disk
You may see a progress indicator
Encryption runs in the background
The device will be marked Compliant once encryption is fully enabled and detected by the ComplyJet Agent.
Windows Configuration (BitLocker)
Windows uses BitLocker for full disk encryption.
BitLocker is only available on Windows Pro, Enterprise, and Education editions. It is not available on Windows Home.
You may want to follow the steps to turn on standard Bitlocker encryption provided by Microsoft. Follow Microsoft's official steps to turn on BitLocker encryption:
Locate the hard drive you want to encrypt under “This PC” in Windows Explorer.
Right-click the target drive and choose “Turn on BitLocker.”
Choose “Enter a Password.”
Enter a secure password.
Choose “How to Enable Your Recovery Key” which you’ll use to access your drive if you lose your password.
Choose “Encrypt Entire Drive.” This option is more secure and encrypts files you marked for deletion.
Click “Start Encrypting” to begin the encryption process.
Once BitLocker is enabled and encryption is complete, the ComplyJet Agent will detect the encrypted state.
How ComplyJet Evaluates This
The ComplyJet Agent checks:
Whether FileVault (macOS) is enabled
Whether BitLocker (Windows) is enabled
Whether the system drive is encrypted
If encryption is active, the device will show Compliant. If encryption is disabled or not detected it will show Non-Compliant.
Common Reasons for Failure
FileVault is turned off
BitLocker is not enabled
Windows Home edition (BitLocker unavailable)
Encryption setup started but not completed
Device not synced after enabling encryption
Next Steps
After enabling encryption:
Click Sync now inside the ComplyJet Agent
Wait for encryption to complete (if still in progress)
Confirm the device check shows Compliant
Once encryption is properly enabled, the test will automatically pass.