Open jdemaio opened 4 years ago
Good call @jdemaio. In my environment, the script never escrowed with the deprecated config profile scoped. Had to unscope, double checked our Security and Privacy
payload, and it worked with just institutional recovery key and escrow enabled.
Incidentally, it gets filed as a personal recovery key in Jamf while no institutional recovery key is present. Probably due to how it's generated as a personal key: fdesetup changerecovery -norecoverykey -verbose -personal -inputplist
.
It might be helpful to include information regarding the updates done to the Security & Privacy payload when 10.13 was released. I was trying to use this script but kept running into issues with my config profile that used the old FileVault Recovery Key Redirection payload. Referenced here https://docs.jamf.com/9.101.0/casper-suite/release-notes/What%27s_New_in_This_Release.html