Extention Attribut to get FileVault Recovery Key

Eskobar
Contributor

i want to create an extension attribute to display FileVault recovery key.

No luck with this one.

Eskobar_0-1682415211614.png

Thanks for your advice

3 REPLIES 3

sdagley
Esteemed Contributor II

@Eskobar You're not going to be able to extract the key that way, it's only available when the key is created. The only mechanism I've heard of to programmatically extract the key was a post made to the MacAdmins Slack channel where someone had written a script to bring up the key in the JSS console and scrape the page to extract the key. Unfortunately I cannot find that post any more.

BL-ay
New Contributor II

Hi @Eskobar, if you are using Jamf Pro, it is already already a menu in the inventory called "Disk Encryption".
The personal Recovery Key is the one you are searching for. 

BLay_0-1682429606596.png

 

mm2270
Legendary Contributor III

In a recent version of Jamf Pro, I think it was 10.25.x, Jamf finally added the ability to show the FV Individual Recovery Key in a column in a report, as an inventory display item. Realistically, that's the only way you'll be able to report on it or display it.