🔐 To provide you with the most security, FileVault recovery keys are not visible via Fleetsmith's Admin Console once an encryption certificate is added.
What this means is that to view the recovery keys, you will need to do the following:
1) Navigate to the Device Details page for the desired device and select Download Recovery Key:
This will download the encrypted key to your device's ~/Downloads/ folder unless you have specified otherwise.
2) Using Terminal, navigate to the folder where your private key that pairs with your encryption certificate is located, modify the following command to reflect your downloaded key and private key's filenames, and run it.
openssl smime -decrypt -inform der \
-in ~/Downloads/YourDownloadedKey.dat \
-inkey YourPrivateKey.pem \
This command decrypts the FileVault key and creates a plaintext document that you can view the key in.
✨ Please Note: that you must modify the command to replace YourDownloadedKey and YourPrivateKey with your respective filenames. Also, this command presupposes your downloaded key is in your Downloads folder. If it is not, you will need to adjust ~/Downloads/ to the correct location.