The first PW is to unlock filevault there's no way around this
unfortunately so as we discovered 2 logins but the PW's will synch.You
can reissue the PRK with a script I think this is the one we use
https://github.com/jamf/FileVault2_Scripts/blob/mas...