...
- Have the user unlock the disk and log into their account
- Go to System Preferences → Profiles. Confirm there is an "Enable FileVault" profile in the list of profiles. If not, stop here and reach out to Mac Engineering.
- Run the following command: "sudo fdesetup
sudo fdesetup changerecovery -personal
"- enter the user's uniqname where it says "Enter the user name:"
- enter their password at the next prompt
- This will show you a personal recovery key – you do not need to write this down.
- Run this command after that: "{{sudo jamf recon"}}
- Run this command after that: "{{diskutil ap updatePreboot /" }} (do not forget the trailing /)
- Reboot the computer
...