HCS Blog

Make sure the user shows up in the FileVault users list.  We will need the UUID for the last step.


sudo fdesetup list

bob,68C6BCDD-9F15-4449-B38D-63E2571ECD9F


Find the Macintosh HD ( or whatever your boot disk name is ) You will need the IDENTIFIER for the next step.

diskutil list

/dev/disk0 (internal, physical):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      GUID_partition_scheme                        *41.9 GB    disk0

   1:                        EFI EFI                     209.7 MB   disk0s1

   2:                 Apple_APFS Container disk1         41.7 GB    disk0s2


/dev/disk1 (synthesized):

   #:                       TYPE NAME                    SIZE       IDENTIFIER

   0:      APFS Container Scheme -                      +41.7 GB    disk1

                                 Physical Store disk0s2

   1:                APFS Volume Macintosh HD            11.9 GB    disk1s1

   2:                APFS Volume Preboot                 44.2 MB    disk1s2

   3:                APFS Volume Recovery                509.6 MB   disk1s3


Run this command to sync the FileVault and login passwords.  You MUST know the old password.  It will NOT work without the users old password.  (disk1s1 is the identifier and 68C6BCDD-9F15-4449-B38D-63E2571ECD9F is the UUID)

sudo diskutil apfs changePassphrase disk1s1 -user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F

Old passphrase for user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F:

New passphrase:

Repeat new passphrase:

Changing passphrase for cryptographic user 68C6BCDD-9F15-4449-B38D-63E2571ECD9F on APFS Volume disk1s1

Passphrase changed successfully

Restart your Mac.  The Filevault and Login passwords will now be in sync.

Have you found yourself composing an email message on your Mac while staring glumly at the receipt or document you need to scan and attach to the message? Adding that scan to the message isn’t impossible, but until macOS 10.14 Mojave, it hasn’t necessarily been easy.

It’s super simple now, thanks to a new Mojave feature called Continuity Camera. It lets you take pictures or scan documents with an iPhone or iPad running iOS 12 and have those images show up immediately on the Mac, either in a document or on the Desktop.

How To Edit The SIP Protected TCC.db File On macOS Sierra 10.12.2 And Later.pdf

You can use the mdls -raw command to view the metadata for files on your Mac.

Example: mdls -raw /pathToYourFile

If a file was sent to you via airdrop, that file will have metadata that contains "com.apple.AirDrop". All you need to do to see all files that were sent to your Mac Computer via airdrop is run the mdfind command and search for "com.apple.AirDrop".

Example: mdfind com.apple.AirDrop

You can also use the mdfind command to search in a specific directory for certain file types.

Click to view PDF.  The zip file contains sample files.

Jamf_Recovery_key_FileVault.pdf

This how to document will walk you through setting up a smart group based on criteria from an extensioin atrribute that will find all local users that do not have a secure token in their Authentication Authority.  Be sure to download the how to guide and the extension attribute to following along.  Enjoy!

Users without secure token.xml.zip