fdesetup changerecovery fails when using a recoverykey instead of a password

Originator:armin.praher
Number:rdar://33284118 Date Originated:July 13 2017, 8:17 AM
Status:Open Resolved:
Product:macOS Product Version:10.13 Beta 3
Classification:Bug Reproducible:Always
 
Summary:
Previous to 10.13 it was possible to change the recovery key by telling fdesetup changerecovery to use the current recoverykey as a password. In 10.13 with an APFS systemdisk this fails with "unable to change key" exit code 136

Steps to Reproduce:
fdesetup enable
create a plist file with the recovery key from the previous step
cat plist | fdesetup changerecovery -personal -inputplist -verbose

Expected Results:
The recovery key is changed and a new recovery key is output to the terminal

Observed Results:
fdesetup: auth info dictionary path = stdin
fdesetup: use personal recovery key
fdesetup: device path = /
Error: Unable to change key
exit code 136

Version:
macOS 10.13 Beta3 Build 17A306f

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!