QuestionQ44

Device Support

You need to reset a user's forgotten password on a Mac encrypted with FileVault.

What must have been escrowed in MDM to make this possible?

Explanation

A FileVault personal recovery key (PRK) can be escrowed to a device-management service and used to unlock an encrypted Mac for password recovery. Apple recommends a PRK over an institutional recovery key for organizational FileVault management.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!