![]() If a user forgets their macOS user account password and can't log in to their Mac, you can use the private key to unlock their disk. You should see a message that a recovery key has been set by your company, school, or organization. If FileVault is turned off, open Security & Privacy preferences and turn on FileVault.Sudo fdesetup changerecovery -institutional -keychain /Library/Keychains/FileVaultMaster.keychain If FileVault is already turned on, enter this command in Terminal:. ![]() ![]() Sudo chmod 644 /Library/Keychains/FileVaultMaster.keychain Sudo chown root:wheel /Library/Keychains/FileVaultMaster.keychain These commands make sure that the file's permissions are set to -rw-r-r- and the file is owned by root and assigned to the group named wheel. Open the Terminal app and enter both of the following commands.Put a copy of the updated FileVaultMaster.keychain file in the /Library/Keychains/ folder.After removing the private key from the keychain, follow these steps on each Intel-based Mac that you want to be able to unlock with your private key.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |