Work
FileVault and Bluetooth Input Devices
An evidence-based analysis of how FileVault pre-boot authentication affected Bluetooth input devices during a Mac security rollout.
Context
During a university-wide security uplift, FileVault full-disk encryption was being enabled across the Mac fleet. A reported issue suggested that some users could not use Bluetooth keyboards or mice at the FileVault unlock screen after restarting, creating a risk to accessibility, productivity, and confidence in the change.
Approach
I reproduced the issue across controlled Mac and peripheral configurations, then compared Bluetooth-only devices with USB receiver and wired alternatives. The testing isolated the failure to the pre-boot authentication stage, before the full operating system and Bluetooth services were available.
Recommendation
The analysis recommended retaining FileVault and providing practical, tested alternatives for the initial unlock: use a USB receiver where supported, keep a compatible Apple or wired keyboard available, and identify Bluetooth-only edge cases such as desktop Macs without an alternative input device.
Outcome
The resulting technical report gave change management, security stakeholders, and frontline IT support a shared, evidence-based response. It enabled the rollout to proceed with clear support guidance while preserving the intended encryption control.