Deleting the FileVault Institutional Key

[bmarks]

Due to changes in the philosophy of our security team, we'd like the delete the institutional keys off of our Macs. I have read Rich Trouton's extensive blog posts on this topic, and it appears it can be automated somewhat using a .plist file pre-populated with either the user's password or the individual FileVault key.

Can anyone think of a way to do this silently and without user interaction if you don't know the user's password or individual key? I'd like to make this invisible to the user.

[gaoyajing0810]

Have you tried using the ‘fdesetup’ command to manipulate the encryption, decryption, and decryption of the disk. Or close FileVault

Use jamf manage default administrator to close

[gaoyajing0810]

Have you tried using the ‘fdesetup’ command to manipulate the encryption, decryption, and decryption of the disk. Or close FileVault

Use jamf manage default administrator to close

[gaoyajing0810]

Have you tried using the ‘fdesetup’ command to manipulate the encryption, decryption, and decryption of the disk. Or close FileVault

Use jamf manage default administrator to close

[bmarks]

We manage FileVault with a configuration profile, so fdesetup can't be used to disable FV.