Has anyone implemented Recovery Lock on M1 devices using the API successfully ? Could someone share their script if so?
+4I know you can SetRecoveryLock during DEP... but how do you turn it off after that?
You can use the API to set an empty password, which will turn it off - If you are comfortable using python you the script I mentioned above.
+7You can use the API to set an empty password, which will turn it off - If you are comfortable using python you the script I mentioned above.
Are there any directions in how to invoke the API?
+2Here you go - https://github.com/shbedev/jamf-recovery-lock
Anyone know if this tool or the recovery_lock_key API command also enables the 60 minute key rotation or can that only be done through the PreStage?
+4Anyone know if this tool or the recovery_lock_key API command also enables the 60 minute key rotation or can that only be done through the PreStage?
At the moment, the key rotation is only supported when recovery lock is enabled through PreStage.
+2At the moment, the key rotation is only supported when recovery lock is enabled through PreStage.
That's what I figured - thanks for confirming!
+8You can find our script here https://gist.github.com/ExperimentalHeaven/09eeafa1122dd4bbac30cb9b91309b52
Simple bash with the use of jq to make the parsing easier
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.