Hey Jamf Nation,
I'm at a loss here. I have multiple endpoints that are prompting for recovery keys out of the blue. The only things that have changed recently in our environment are the recent security patch for macOS (that messed with the keychain and Okta Device Trust), as well as a Google Chrome forced patch via patch management (this is less likely the cause, but you never know). Has anyone else experienced this very recently?
That's sad to hear @bfreezy I was thinking this was cleared up on Monterey. I had thought with some of the later Big Sur revisions it got better.
Agreed. I've flipped our Software Update profile to stop downloading updates in the background. Will likely open up a case with Apple if things don't improve.
This just happened to my wife’s work issued computer. It restarted on its own. Now it’s asking for a recovery key that she NEVER generated, and to her knowledge, no one generated for her. Suffice to say, she has no recovery key. What is the solution?
Almost certainly if it’s a work computer it will be encrypted, and she will need to contact her IT dept for it.
This just happened to my wife’s work issued computer. It restarted on its own. Now it’s asking for a recovery key that she NEVER generated, and to her knowledge, no one generated for her. Suffice to say, she has no recovery key. What is the solution?
Well I found this thread due to the Ventura 13.3 update. I'm sorry, I know the thread is old. I had to deal with this issue this morning. I'll search for a newer thread.
can confirm its still happening even on 13.3
We are setting this happen as well with the 13.3.1 update first time we have ever seen it. Only seems to be on the M2 Macs so far.
We are setting this happen as well with the 13.3.1 update first time we have ever seen it. Only seems to be on the M2 Macs so far.
We also have this problem since version 13.3.
All Apple silicon devices are affected.
I will open a support ticket and keep you updated.
Hi everyone,
Has anyone found a solution for the issue where users are randomly prompted to enter their recovery key? We’ve seen this happen a few times over the past couple of days, mostly on devices running macOS Sonoma. Any insights or fixes would be greatly appreciated.
To anyone following this thread, we believe the issue was isolated to specific set of circumstances:
- Mac computer with Apple silicon
- Automated Device Enrollment with standard user created from the Setup Assistant
- Standard user is the only SecureToken-holder (aka "volume owner")
- FileVault is enabled
- Configuration profile with Software Update payload configured to automatically download available updates. (also possible to trigger with a softwareupdate -d -a command in place of profile to download the update.)
Once the update is downloaded, the next time the computer is restarted it will boot to the Recovery Assistant. Since the user isn't an administrator with a SecureToken, authentication by personal recovery key (PRK) is requested instead. This appears to affect computers with admin users too, but they are instead prompted to enter their password instead of a recovery key.
If this appears to be the issue you're encountering, please contact support and reference PI-009844 for us to track impact and escalate with Apple. If you are escalating with Apple directly to share impact, you can reference FB9196443 or AppleCare case #101417267535
Not yet resolved. We are on Sonoma and still getting random recovery key prompts after pushing software update via Jamf Software Update under Content Management. In this case all computers were Sonoma and all user profiles were admin.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.