Recovery Lock API

[kosath122]

Has anyone implemented Recovery Lock on M1 devices using the API successfully ? Could someone share their script if so?

[dep]

Here you go - https://github.com/shbedev/jamf-recovery-lock 

[mike_prather]

Anyone know if this tool or the recovery_lock_key API command also enables the 60 minute key rotation or can that only be done through the PreStage?

[dep]

At the moment, the key rotation is only supported when recovery lock is enabled through PreStage.

[mike_prather]

That's what I figured - thanks for confirming!

[sirsir]

I know you can SetRecoveryLock during DEP... but how do you turn it off after that? 

[dep]

You can use the API to set an empty password, which will turn it off - If you are comfortable using python you the script I mentioned above. 

[sirsir]

Are there any directions in how to invoke the API? 

[dan-snelson]

You upvote is welcomed:

https://snelson.us/2022/06/view-recoveryos-password/

[michaelhusar]

You can find our script here https://gist.github.com/ExperimentalHeaven/09eeafa1122dd4bbac30cb9b91309b52
Simple bash with the use of jq to make the parsing easier