Will only escrow standard plist keys inside /Library/Addigy/fv-escrows.

If the defer call is not provided, the password flag must be provided.Įscrows any pending FileVault key to Addigy. Must be used along with the -escrow flag.Įnabled FileVault for this device. Will dismantle the automatic escrow mechanism if it is enabled. This option will obtain the password at login. Will defer enabling FileVault until the device is restarted. This option requires -existing-user and -existing-password flags. Usage: /Library/Addigy/filevault-manager Īdds a user to FileVault for this device. What other options are available within the utility? We can see full usage by running the /Library/Addigy/filevault-manager command without any arguments. We recommend method 2) as it is transparent to the end-user and doesn't require the end-user's password in advance. There's a big difference between the first two methods, which use the -defer flag, and the third method, which uses the -user and -password flags. Here are the three commands that the web UI is creating and sending to filevault-manager when FileVault is enabled in GoLive:ġ) I don't know the password /Library/Addigy/filevault-manager -enable -deferĢ) I don't know the password, and prompt the restart /Library/Addigy/filevault-manager -enable -defer -prompt-restartģ) I know the username and password /Library/Addigy/filevault-manager -enable -user $username -password $password Let's take a look at the most straightforward methods for using this. When enabling FileVault from GoLive, the Addigy web UI sends commands to this utility, but there are many other potential methods for using this utility. filevault-manager is a compiled command-line utility that is installed with the Addigy agent in /Library/Addigy on each device. This is where Addigy's filevault -manager utility comes into play. Institutional and Master keys will no longer be supported. However, Apple has deprecated this method in High Sierra. Prior to macOS 10.13 High Sierra, FileVault supported a Mastery Recovery Key-a recovery key that could be passed to the fdesetup command during setup that would act as a universal decryption key. For this reason (and others), we highly recommend you take FileVault seriously and enable it individually on your devices in GoLive using our instructions in the article Enabling FileVault through a GoLive Session. Losing both a device's password and recovery key will result in data loss. Enabling FileVault can be painstaking and risky. FileVault disk encryption, the built-in encryption of macOS, is a beast to manage.

How get recovery key for mac filevault