Configure a FileVault Institutional Recovery Key for macOS DevicesĪn Institutional recovery key is a pre-made recovery key that can be installed on a system prior to the encryption process. Once FileVault is enabled on the device, the Institutional Recovery Key will be reported to the server. For more information, see the Configure a FileVault Institutional Recovery keysection. Configure a FileVault Primary Keychain.Choose Institutional as the recovery type and configure the recovery key settings as needed.Generally, Institutional recovery is reserved for Corporate Owned, Line-of-Business devices where the user does not have the ability to decrypt the device if they forget the login password. Institutional recovery is beneficial because the network administrator can decrypt any device using a single Institutional Recovery Key, saving time by not needing to enter a unique Personal Recovery Key for each computer. Once FileVault is enabled on the device, the Personal Recovery Key will be reported to the server. Upload the FileVaultMaster.cer to the Disk Encryption profile to encrypt the assigned computers with your Institutional Recovery Key.For more information, see the Configure a FileVault Institutional Recovery key section. Choose Personal & Institutional as the recovery type and configure the recovery key settings as needed.Configure a new Disk Encryption profile.Institutional and Personal recovery is useful if the user will benefit from viewing and keeping a Personal Recovery Key, but the company will need a quick way to decrypt the device using a Institutional Recovery Key when necessary. Institutional and Personal Recovery for macOS Devices These include recovery keys for Personal use, Institutional use, or a combination of both. Once the decision is made to encrypt your managed devices, you have options that allow you to choose the best recovery model for your deployment. With FileVault2, Workspace ONE UEM builds on native capabilities to encrypt the drive and provides functionality within the Workspace ONE Intelligent Hubto force the user to complete the encryption process. Enforce an encryption policy on macOS computers to protect data on the hard drive and escrowing recovery keys stored in Workspace ONE UEM so the keys can be recovered at later time.
0 kommentar(er)
