I am using an Samsung S7 edge; together with IBM Maas360; and I ran into a an interesting situation.
Prior last week, my S7 was running Android 6.
Android can be configured to ask for your password before the system starts. By default, the device will start the OS, and later on, when the OS is up and running ask first for PIN; then for your Android password.
Anyway, last week Maas360 recognized my device to have an "encryption status" of
Then I received the long awaited upgrade to Android 7. Everything works nicely ... but the next morning, upon restarting the device ... I realize at some point that I lost the Wifi certificates for my companies intranet. Why? Because now, Maas sees "encryption status" as
I then turned into the settings; and changed the device to ask for the password directly after start. I restart ... and as expected - I am asked for the password, and then there is this "unlock" icon indicating that my device gets "unlocked" during OS startup. Checking encryption status again; I now get
active. (which will hopefully fix my Maas/wifi certificate problem)
But beyond that; I am pretty confused by now: why can Android 6 give me "encryption is active"; although the OS starts up without my password? How can it decrypt all the encrypted data ... when it doesn't have my password?
( for the record: I used this app to actually check the encryption status of the device )