- #Mac acrobat has no help > check for updates pro#
- #Mac acrobat has no help > check for updates password#
- #Mac acrobat has no help > check for updates mac#
#Mac acrobat has no help > check for updates mac#
Please verify that the redirection profile is installed and the Mac is connected to the internet."
] & echo "$FDESETUP_OUTPUT"Įcho " FileVault key was generated, but escrow cannot be confirmed. usr/bin/grep -q "Escrowing recovery key." /dev/null & # Check output of fdesetup command for indication of an escrow attempt (This usually requires two 'jamf recon' runs to show as valid.)"Įcho " The recovery key does not appear to have been updated locally."
NEW_PRK_MOD=$(/usr/bin/stat -f "%Sm" -t "%s" "/var/db/FileVaultPRK.dat")Įcho "Recovery key updated locally and available for collection via MDM. # Check new modification time of of FileVaultPRK.dat Unset USER_PASS Differentiate =10.13 success conditions
#Mac acrobat has no help > check for updates password#
PRK_MOD=$(/usr/bin/stat -f "%Sm" -t "%s" "/var/db/FileVaultPRK.dat")įDESETUP_OUTPUT="$(/usr/bin/fdesetup changerecovery -norecoverykey -verbose -personal -inputplist įDESETUP_RESULT=$? Clear password variable. If thenĮcho "Found existing personal recovery key." REMOTE_USERS=$(/usr/bin/who | /usr/bin/grep -Eo ' For 10.13's escrow process, store the last modification time of /var/db/FileVaultPRK.datĮcho "Checking for /var/db/FileVaultPRK.dat on macOS 10.13+."
#Mac acrobat has no help > check for updates pro#
(This prevents JAMF Pro from marking a policy as "failed" if the words "fail" or "error" inadvertently appear in the script output.)īAILOUT=false Make sure we have root privileges (for fdesetup). PROFILE_IDENTIFIER_10_13="CA843A15-E86C-4E45-8D51-27D8F68C6249" # 10.13 and later # DO NOT EDIT BELOW THIS LINE # VALIDATION AND ERROR CHECKING # Suppress errors for the duration of this script. Please contact the Help Desk at 555-1212 for help." Optional but recommended: The profile identifiers of the FileVault Key Redirection profiles (e.g. SUCCESS_MESSAGE="Thank you! Your FileVault key has been escrowed." The body of the message that will be displayed if a failure occurs.įAIL_MESSAGE="Sorry, an error occurred while escrowing your FileVault key. Please contact the Help Desk at 555-1212 for help with your Mac password." The body of the message that will be displayed after successful completion. PROMPT_MESSAGE="Your Mac's FileVault encryption key needs to be escrowed by YOUR COMPANY NAMEĬlick the Next button below, then enter your Mac's password when prompted." The body of the message that will be displayed after 5 incorrect passwords.įORGOT_PW_MESSAGE="You made five incorrect password attempts. All message strings below can be multiple lines. PROMPT_TITLE="Encryption Key Escrow" The body of the message that will be displayed before prompting the user for their password. LOGO="" The title of the message that will be displayed to the user. If no logo is provided, the FileVault icon will be used.
Author: Elliot Jordan Created: Last Modified: Version: 1.9.8 # VARIABLES # (Optional) Path to a logo that will be used in messaging. The "redirect FileVault keys to JSS" configuration profile must already be deployed in order for this script to work correctly.
It prompts users to enter their Mac password, and uses this password to generate a new FileVault key and escrow with the JSS. I taken this scripts from !/bin/bash # Name: reissue_filevault_recovery_key.sh Description: This script is intended to run on Macs which no longer have a valid recovery key in the JSS. I tested on Big Sur for re-issue a recovery key and its working for me.
0 kommentar(er)
