The key rotation fails to be reflected on the selected clients after you take the following actions:
- You enable the MNE policy option 'Generate a new FileVault key in days'
- Set the number of days
The reason is that the macOS Mojave operating system was released with a change in Apple's sandboxing methods. This change prevents the existing time-based key rotation methods of MNE.
Previously, it was possible for a program to set a cron job without permission. To safeguard the integrity of the system, this action is blocked unless a user has granted the program administrative permissions.
