FileVault Recovery Key Escrow
com.apple.security.FDERecoveryKeyEscrow
The payload that configures FileVault recovery key escrow.
Not available with User Enrollment · Only one instance per profile · macOS: device channel only
Configuration Keys (3)
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
| string | The description of the location where the system escrows the recovery key. The system inserts this text into the message the user sees when it enables FileVault. | Default: — | Range: — | |
| string | The UUID of a payload within the same profile that contains the certificate that the system uses to encrypt the recovery key. The referenced payload must be of type 'com.apple.security.pkcs1'. | Default: — | Range: — | |
DeviceKeystringDeviceKey | string | The string that's included in help text if the user appears to have forgotten the password. Site admins can use this key to look up the escrowed key for the particular computer. This key replaces the 'RecordNumber' key used in the previous escrow mechanism. If the key is missing, the system uses the device serial number instead. | Default: — | Range: — |