This option is enabled by default when you create a FileVault 2 policy, and cannot be disabled.Yesterday we wrote of the perils of losing your Apple ID recovery key when two-factor is enabled and many of you wrote to us as you’d lost yours and didn’t know what to do. Select Higher than or Lower than, then select an existing policy from the drop-down list.įor example, to give Policy A higher priority than Policy B, you would select “Higher than” and “Policy B”.Įnter an explanation of the purpose of this policy.Įnables the storage of the recovery key to MobileIron Core. This priority determines which policy is applied if more than one policy is available. Specifies the priority of this policy relative to the other custom policies of the same type. Only one active policy can be applied to a device. Select the relevant radio button to indicate whether the policy is Active or Inactive.
Storing and retrieving FileVault personal recovery keys in Core (macOS)