# Differentiate =10.13 success conditions PRK_MOD= $(/usr/bin/stat -f "%Sm " -t "%s " "/var/db/FileVaultPRK.dat " )įDESETUP_OUTPUT= " $(/usr/bin/fdesetup changerecovery -norecoverykey -verbose -personal -inputplist If thenĮcho "Found existing personal recovery key. If ] || ] thenĮcho "Checking for /var/db/FileVaultPRK.dat on macOS 10.13+. # For 10.13's escrow process, store the last modification time of /var/db/FileVaultPRK.dat # Translate XML reserved characters to XML friendly representations. bin/launchctl unload /System/Library/LaunchDaemons/.plistĮcho "Stopping FDERecoveryAgent process. If /bin/launchctl list | /usr/bin/grep -q " " thenĮcho "Unloading FDERecoveryAgent LaunchDaemon. # If needed, unload and kill FDERecoveryAgent. bin/launchctl " $L_METHOD " " $L_ID " sudo -u " $CURRENT_USER " " $jamfHelper " -windowType "utility " -icon " $LOGO " -title " $PROMPT_TITLE " -description " $FORGOT_PW_MESSAGE " -button1 'OK ' -defaultButton 1 -startlaunchd & >/dev/null &Įcho "Successfully prompted for Mac password. REMOTE_USERS= $(/usr/bin/who | /usr/bin/grep -Eo ' " '" ' -e 'return text returned of result ' ) "Įcho " Password prompt unsuccessful after 5 attempts. # Make sure we have root privileges (for fdesetup). # marking a policy as "failed" if the words "fail" or "error" inadvertently # Suppress errors for the duration of this script. # Optional but recommended: The profile identifiers of the FileVault Key Please contact the Help Desk at 555-1212 for help. # The body of the message that will be displayed if a failure occurs.įAIL_MESSAGE= "Sorry, an error occurred while escrowing your FileVault key. SUCCESS_MESSAGE= "Thank you! Your FileVault key has been escrowed. # The body of the message that will be displayed after successful completion. Please contact the Help Desk at 555-1212 for help with your Mac password. # The body of the message that will be displayed after 5 incorrect passwords.įORGOT_PW_MESSAGE= "You made five incorrect password attempts. PROMPT_MESSAGE= "Your Mac's FileVault encryption key needs to be escrowed by PretendCo IT.Ĭlick the Next button below, then enter your Mac's password when prompted. All message strings below can be multiple lines. # The body of the message that will be displayed before prompting the user for # The title of the message that will be displayed to the user. If no logo is provided, the FileVault icon will be used.
# (Optional) Path to a logo that will be used in messaging. # be deployed in order for this script to work correctly. # FileVault keys to JSS" configuration profile must already # new FileVault key and escrow with the JSS. # their Mac password, and uses this password to generate a
# Description: This script is intended to run on Macs which no longer have # Name: reissue_filevault_recovery_key.sh
0 kommentar(er)
