Can’t find filevault recovery key in portalSolved

Hey Alex, we got into the same case. Can you check which recovery key type you selected in the FileVault policy? You need to check out the Escrow Personal Recovery Key option, but this option only shows when you choose Personal Recovery Key or Both Personal and Institutional Recovery Key. If you selected only the Institutional Recovery Key, Hexnode won’t escrow personal keys since it uses the organization’s encryption certificate instead.

Oh, I see. I just checked the policy and realized I selected the Institutional Recovery Key during setup. That explains why I’m not seeing the personal recovery keys stored in the Hexnode console. 

Exactly. The Institutional Recovery Key is meant for central management; it creates a single key for all devices instead of individual ones. That’s why you won’t see separate personal recovery keys in the console. It trips up a lot of admins for the first time around.

Ah, that makes sense now. So basically, if I want to see the Escrow Personal Recovery Key option, I need to select either Personal Recovery Key or Both Personal and Institutional Recovery Key in my FileVault policy. That way, each device generates its own key, which is then escrowed into Hexnode. I understand the difference now. Thanks for clearing that up, guys!