HCS Blog

Make sure the user shows up in the FileVault users list.  We will need the UUID for the last step.


sudo fdesetup list

bob,68C6BCDD-9F15-4449-B38D-63E2571ECD9F


Find the Macintosh HD ( or whatever your boot disk name is ) You will need the IDENTIFIER for the next step.

diskutil list

/dev/disk0 (internal, physical):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *41.9 GB    disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                 Apple_APFS Container disk1         41.7 GB    disk0s2


/dev/disk1 (synthesized):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      APFS Container Scheme -                      +41.7 GB    disk1

                                 Physical Store disk0s2

   1:                APFS Volume Macintosh HD            11.9 GB    disk1s1

   2:                APFS Volume Preboot                 44.2 MB    disk1s2

   3:                APFS Volume Recovery                509.6 MB   disk1s3


Run this command to sync the FileVault and login passwords.  You MUST know the old password.  It will NOT work without the users old password.  (disk1s1 is the identifier and 68C6BCDD-9F15-4449-B38D-63E2571ECD9F is the UUID)

sudo diskutil apfs changePassphrase disk1s1 -user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F

Old passphrase for user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F:

New passphrase:

Repeat new passphrase:

Changing passphrase for cryptographic user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F on APFS Volume disk1s1

Passphrase changed successfully

Restart your Mac.  The Filevault and Login passwords will now be in sync.

You can use the mdls -raw command to view the metadata for files on your Mac.

Example: mdls -raw /pathToYourFile

If a file was sent to you via airdrop, that file will have metadata that contains "com.apple.AirDrop". All you need to do to see all files that were sent to your Mac Computer via airdrop is run the mdfind command and search for "com.apple.AirDrop".

Example: mdfind com.apple.AirDrop

You can also use the mdfind command to search in a specific directory for certain file types.

This how to document will walk you through setting up a smart group based on criteria from an extensioin atrribute that will find all local users that do not have a secure token in their Authentication Authority.  Be sure to download the how to guide and the extension attribute to following along.  Enjoy!

Users without secure token.xml.zip

Click on the PDF link below.

How to Create a Signed QuickAdd Package.pdf

Click to view PDF.  The zip file contains sample files.

Jamf_Recovery_key_FileVault.pdf

Click the link below to view the PDF.