I am noticing that all devices encrypted before manual Enrollment in to JAMF Pro, are missing personal recovery keys. Does anyone know how can I issue a new key to already encrypted devices, bearing in mind encryption happened prior to Jamf enrollment. Thank you :)
+26Add the devices to Apple Business Manager and use Automated Device Enrollment. Do it the right way and everything will work.
FileVault needs to be enabled with a configuration profile or have the key redirection configuration profile installed before FV is enabled. Disabling FV and re-enabling FV may work, but you should still be use Automated Device Enrollment if at all possible.
+2All our new devices are coming through the method you suggested above. This issue seems to be only with the existing devices which were set up prior to Jamf and hence we have to manually enrol them. If they were to be reset than FV and recovery works fine.
+4I have not tested personally, but seems like my predecessor have used the script (found an inactive policy)
https://community.jamf.com/t5/jamf-pro/filevault-indiviual-key-reissue/m-p/242782
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.