When you're prompted to enter a password to unlock the disk, click Cancel.

Connect the Mac to another Mac (the host) using a Thunderbolt 3 (USB-C) cable.

Once you see the Thunderbolt logo, release the T key.

On the Mac you want to unlock, turn on the computer while holding the T key.

If a user forgets their macOS user account password and can't log in to their Mac, you can use the private key to unlock their disk. You should see a message that a recovery key has been set by your company, school, or organization.

If FileVault is turned off, open Security & Privacy preferences and turn on FileVault.

Sudo fdesetup changerecovery -institutional -keychain /Library/Keychains/FileVaultMaster.keychain If FileVault is already turned on, enter this command in Terminal:.Sudo chmod 644 /Library/Keychains/FileVaultMaster.keychain Sudo chown root:wheel /Library/Keychains/FileVaultMaster.keychain These commands make sure that the file's permissions are set to -rw-r-r- and the file is owned by root and assigned to the group named wheel.

Open the Terminal app and enter both of the following commands.Put a copy of the updated FileVaultMaster.keychain file in the /Library/Keychains/ folder.After removing the private key from the keychain, follow these steps on each Intel-based Mac that you want to be able to unlock with your private key.

How do i get recovery key for mac