Upload the certificate to Miradore through the Management > Files and certificates page. For more information, refer to Apple's documentation.Īfter creating the FileVault master keychain, ensure you have a copy of it in a safe location because the private key from the keychain will be needed if you ever need to unlock disks encrypted with a certificate generated from the keychain.Įxport the FileVault Recovery Key certificate from the master key chain using 'Keychain Access' app on a mac device.

The use of an institutional recovery key requires you to create a FileVault master keychain with a macOS computer. If you want to store the personal FileVault recovery keys to Miradore, please read Storing personal FileVault recovery keys using custom attributes. In the following picture, you see how the personal key is shown to the device user. Please note that it is the device user's responsibility to store the personal recovery key in a safe location. The user always sees the personal recovery key. Show personal recovery keyĭefines whether the personal recovery key is shown to the device user after the FileVault has been activated. It is possible to use both recovery keys, which means that an encrypted disk can be unlocked using either a personal or institutional recovery key. In this case, the administrator is responsible for keeping the recovery key stored in a safe location. Organizations can use the institutional key to unlock any macOS computer's disk that has been encrypted with a certificate generated from the same keychain (See the Institutional recovery key section below). The device's user is responsible for storing the recovery key. The personal recovery key is device-specific and will be generated automatically at the target device when the encryption is enabled. Proceed with Next when you're done.Ĭhoose whether you want to use personal, institutional, or both types of recovery keys for unlocking encrypted files. Configure FileVault encryption settings.Click Add button from the page toolbar and choose macOS > FileVault and Next. Go to Management > Configuration profiles page on Miradore.Steps to enforcing FileVault activation on macOS devices The use of an institutional recovery key requires you to create a FileVault master keychain with a macOS computer.Miradore's FileVault configuration profile is compatible with devices running macOS 10.9 or higher.How to check FileVault status on a macOS device?.Reporting: which devices have FileVault enabled?.Steps to enforcing FileVault activation on macOS devices.

Where to get recovery key for mac