Blog Post

Microsoft Intune Blog
3 MIN READ

Microsoft Intune announces support for macOS FileVault disk encryption management

Mayunk_Jain's avatar
Mayunk_Jain
Icon for Microsoft rankMicrosoft
Jul 24, 2019
(This post is co-authored with Anya Novicheva, Program Manager, Microsoft 365)   Microsoft Intune is excited to announce support for FileVault full-disk encryption configuration on macOS devices....
Updated Apr 02, 2020
Version 2.0
Configuration Manager
microsoft intune
MaxM's avatar
MaxM
Brass Contributor
Aug 05, 2019

I think you misunderstand about the purpose of ShowRecoveryKey in the FileVault2 configuration payload.

 

Here is the relevant part from Apple's https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf:

ShowRecoveryKey: Set to false to not display the personal recovery key to the user after FileVault is enabled. Defaults to true.

 

My point is, we should not show the user the personal recovery key at all. I don't want the user to keep a copy of the key "in a safe place."