Escrowing the personal recovery key for the encrypted macOS device
Due to restrictions set by Apple, the escrowing personal recovery key with GoTo Resolve MDM works only during encryption. This means that escrowing the personal recovery key on an already encrypted macOS device requires some additional steps.
After deploying the FileVault configuration profile, access the encrypted macOS device and perform either one of the following:
You can find the detailed procedures in the following subsections.
Changing the recovery key
Disabling FileVault
Results: With both options, the last step causes the new recovery key to be collected and stored to GoTo Resolve MDM.