fdesetup changerecovery fails when using a recoverykey instead of a password
Originator: | armin.praher | ||
Number: | rdar://33284118 | Date Originated: | July 13 2017, 8:17 AM |
Status: | Open | Resolved: | |
Product: | macOS | Product Version: | 10.13 Beta 3 |
Classification: | Bug | Reproducible: | Always |
Summary: Previous to 10.13 it was possible to change the recovery key by telling fdesetup changerecovery to use the current recoverykey as a password. In 10.13 with an APFS systemdisk this fails with "unable to change key" exit code 136 Steps to Reproduce: fdesetup enable create a plist file with the recovery key from the previous step cat plist | fdesetup changerecovery -personal -inputplist -verbose Expected Results: The recovery key is changed and a new recovery key is output to the terminal Observed Results: fdesetup: auth info dictionary path = stdin fdesetup: use personal recovery key fdesetup: device path = / Error: Unable to change key exit code 136 Version: macOS 10.13 Beta3 Build 17A306f
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!