Recovery Lock API

kosath122
New Contributor

Has anyone implemented Recovery Lock on M1 devices using the API successfully ? Could someone share their script if so?

9 REPLIES 9

dep
New Contributor II

mike_prather
New Contributor II

Anyone know if this tool or the recovery_lock_key API command also enables the 60 minute key rotation or can that only be done through the PreStage?

dep
New Contributor II

At the moment, the key rotation is only supported when recovery lock is enabled through PreStage.

mike_prather
New Contributor II

That's what I figured - thanks for confirming!

sirsir
Contributor

I know you can SetRecoveryLock during DEP... but how do you turn it off after that? 

dep
New Contributor II

You can use the API to set an empty password, which will turn it off - If you are comfortable using python you the script I mentioned above. 

Are there any directions in how to invoke the API? 

dan-snelson
Valued Contributor II

michaelhusar
Contributor II

You can find our script here https://gist.github.com/ExperimentalHeaven/09eeafa1122dd4bbac30cb9b91309b52
Simple bash with the use of jq to make the parsing easier