Interaction between "Allow iCloud to unlock FileVault" and "Allow user to reset password using Apple ID" options
I had activated FileVault with recovery key on my Mac. As a result, activating the option "Allow user to reset password using Apple ID" under "Users and Groups" had virtually no effect: Even with this option activated, the Mac continued to offer only one password recovery function, namely via FileVault recovery key.
Now I have newly activated "Allow iCloud to unlock FileVault". I expected that the option "Allow user to reset password using Apple ID" would now be automatically activated under "Users and groups", but this is not the case. I don't understand this, because in practice there is no separate FileVault password, but after entering the user password the FileVault decryption is started automatically; i.e. a FileVault recovery using iCloud should practically also result in an iCloud recovery of the user password.
Can someone please tell me what the interaction of these two options is, or what happens in practice if "Allow iCloud to unlock FileVault" is activated but not "Allow user to reset password using Apple ID"?
iMac
