I have a FileVault Disk Encryption Configuration with an institutional recovery key set to expire in June. Does anyone know if this needs to renewed? How does it effect the encrypted Mac?
Solved
What Happens When FileMaker Institutional Recovery Key Cert Expires?
+8Best answer by JoshRouthier
I spoke with Apple about this last year when ours was set to expire, and they informed me that the FileVault Encryption will continue, even after the key expires. Sure enough the expiration date came and went, and nothing happened with our FileVault encrypted computers. The senior SE I got was initially unsure when I asked him what would happen when the key expired, but after talking with some other SE's, he had said nothing should happen. So far so good, almost a year later!
+8I spoke with Apple about this last year when ours was set to expire, and they informed me that the FileVault Encryption will continue, even after the key expires. Sure enough the expiration date came and went, and nothing happened with our FileVault encrypted computers. The senior SE I got was initially unsure when I asked him what would happen when the key expired, but after talking with some other SE's, he had said nothing should happen. So far so good, almost a year later!
By default, the public key generated inside a FileVaultMaster.keychain file has an expiration date of one year following its creation date. Nothing happens when it expires, the institutional recovery key keeps working.
For example, I have a test IRK that was first generated in 2010 as a legacy FileVault recovery key on 10.6.8. It still works today on macOS Sierra in 2017.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.