Different Recovery Keys used for Mac encryptionSolved

Participant
Discussion
5 years ago

What is the advantage of encrypting Mac with “Institutional and Personal Recovery Key” over “Institutional Recovery Key” and “Personal Recovery Key”?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
5 years ago
Marked SolutionPending Review

Hey, Thanks for reaching out to us.

On encrypting the Mac using the Institutional Recovery Key, the organization uses a common key to decrypt the devices. The advantage of this is that a new key can be downloaded from the portal itself if the key is lost.
On using the Personal recovery key, each key is unique to the machine that is being encrypted. The user must note down this key as it won’t be saved anywhere in the portal. If this key is lost, the device will have to be a factory reset.
Whereas on using the Institutional and Personal Recovery key, both institutional and personal recovery key will be generated. So, if the personal recovery key is lost, the institutional recovery key can be used to decrypt the device.

Kindly use the help link to know more about the same.

Cheers!
Grace Baker
Hexnode MDM