Skip to main content
Question

Unable to unlock harddrive with filevault institutional key

  • October 25, 2018
  • 3 replies
  • 33 views

Forum|alt.badge.img+4

I followed the instructions listed out by rtrouton on filevault but ran into an issue with my apfs hard drive..
Laptop os - Mojave 10.14

The steps i took-
1-Created new filevault master keychain (multiple copies of it)
2-Edited one of the copies of the filevault master keychain to only contain the public key, and then uploaded that into JAMF as a .pem file.
3-Created a policy on JAMF to use the disk encryption configuration that contained that public key i just uploaded.
4-Rebooted laptop and finished encrypting.
5-Took the filevault master keychain and placed it in my thumb drive. This keychain contained both public and private key.
6. Boot laptop into recovery mode
7. Open up terminal and ran security unlock-keychain /path/to/FileVaultMaster.keychain to unlock the Filevault master keychain that contained both private and public key 8. Ran diskutil apfs unlockVolume UUID -recoveryKeychain /path/to/FileVaultMaster.keychain and then got this error "Error unlocking APFS Volume: The external-to-APFS security system's credential-unwrap operation failed (-69534)"

Any idea?

3 replies

Forum|alt.badge.img+4
  • Contributor
  • November 14, 2018

It looks like you need to unlock the drive with the FileVault keychain that contains the private key.

  1. Connect the external drive that contains the private recovery key.

From - Use the private key to unlock a user's startup disk - https://support.apple.com/en-us/HT202385)


Forum|alt.badge.img+4
  • Contributor
  • November 14, 2018


Forum|alt.badge.img+12
  • Contributor
  • January 8, 2020

@inflicted did u ever figure this out?