Topic: filevault

• Managing FileVault from the command line: status, recovery keys, secure token and bootstrap token

  fdesetup reports and changes FileVault state and recovery-key handling; sysadminctl and profiles report which accounts can unlock the disk and whether a bootstrap token is escrowed with a device management service, which matters before relying on MDM-driven account provisioning.

  methodology · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON