How Do I Invalidate a FileVault Recovery Key

GhostBuster
New Contributor

I would like to test a script to re-issue a FVRK to any enrolled device with an individual recovery key that is not valid. So, on my test machine, how do I invalidate a key that is already valid so I can verify that the script will reissue a valid key? The test machine is on Sierra, 10.12.6, and the server is running v9.96. Thanks.

1 REPLY 1

rderewianko
Valued Contributor II

What comes to mind is: https://derflounder.wordpress.com/2015/12/20/managing-el-capitans-filevault-2-with-fdesetup/
Here's what I'd do
Un enroll the machine (or just kill the mdm)
Run the change key for personal command using the command

fdesetup changerecovery -personal

Re-enroll the machine, it would then have an invalid personal key that jamf doesn't know about.