Ironizzy -- no Recovery Key option presented at the FileVault account password dialog


If ironizzy is configured properly on the new T2 Macs, you should be able to enter the Recovery Key by clicking on the "[?]" icon and then the right-pointing arrow after the words "Recovery Key" as shown below:


 


If you are not getting that dialog when you click on the icon, you can reset this by the following steps:

  1. Have the user unlock the disk and log into their account
  2. Go to System Preferences → Profiles.    Confirm there is an "Enable FileVault" profile in the list of profiles.  If not, stop here and reach out to Mac Engineering.
  3. Run the following command:   sudo fdesetup changerecovery -personal
    1. enter the user's uniqname where it says "Enter the user name:"
    2. enter their password at the next prompt
    3. This will show you a personal recovery key – you do not need to write this down.
  4. Run this command after that:  sudo jamf recon
  5. Run this command after that:  diskutil ap updatePreboot /
      (do not forget the trailing /)
  6. Reboot the computer

That should give you the Recovery Key option after the reboot.  


8-23-18:  If you need the Recovery Key after that, please contact the Mac Engineering team.   As of this date, the Recovery Key is not published to the computer's izzy record.