The option saves you the trouble of worrying about the recovery key while setting up FileVault and also provides an additional level of security by removing the chances of compromising your recovery key in a data breach or other security incident.
This way, you can use Hexnode to automatically encrypt or decrypt the recovery key or you can manually specify the certificate to encrypt the recovery key. When this option is enabled, Hexnode can retrieve and back up the personal recovery key on your behalf. To address such issues, Hexnode has introduced the Escrow Personal Recovery Key option for macOS 10.13+ devices. You may refer to this Apple article for steps to create a new FileVault keychain. However, for generating a new institutional recovery key, you will need to have the new key available as a certificate file stored locally on the system. For generating a new personal recovery key, running the code will generate a new recovery key and displayed it. Sudo fdesetup changerecovery institutional –certificate /path_to_fileįdesetup is the command-line tool for Mac to enable, disable and configure FileVault. If you wish to go with the later, you can run the following script on the terminal –
and start over again or you can replace the recovery key. For your case, you can either generate a new key and disable the older keys by going to System Preferences > Security & Privacy > FileVault > Turn off FileVault. Post encryption, there is no way to find out the recovery key that was priorly generated. Hi the recovery key is only generated once while initially setting up the FileVault encryption on Mac.
0 kommentar(er)
