Escrow the personal recovery key for the encrypted macOS device
Due to restrictions set by Apple, the escrowing personal recovery key with LogMeIn Resolve MDM works only during encryption. This means that escrowing the personal recovery key on an already encrypted macOS device requires some additional steps.
After deploying the FileVault configuration profile, access the encrypted macOS device and perform either one of the following:
You can find the detailed procedures in the following subsections.
Change the recovery key
Before you begin:
Note: You need to have administrator privileges to perform this procedure.
Disable FileVault
Before you begin:
Note: You need to have administrator privileges to perform this procedure.
- Enter the username and password.
Alternatively, you can perform steps 1 – 3 also from the macOS settings: .
Results: With both options, the last step causes the new recovery key to be collected and stored to LogMeIn Resolve MDM.
Note: After selecting Sync now, it takes a while before the recovery key becomes visible.
Article last updated: 3 March, 2025