As long as Fleetsmith is the source to encrypt a device, a FileVault 2 Recovery Key will be available in the Fleetsmith Admin Console.
To view an escrowed Recovery Key:
1. In the Fleetsmith Admin Console, click Devices.
2. Click the DeviceName of the device you're working with.
3. On the individual device's page, click on the Device Details tab.
4. Under Health, find Encryption. Click the ShowKey button.(This option will be available as long as Fleetsmith encrypted the device. If the device was encrypted prior to Fleetsmith, you will only see Managed. You can read more about why this happens here.)