No recovery key when enabling filevault in Yosemite upgrade

I was upgrading from Mavericks to Yosemite and when setting up the new OS it asked me if I want to enable Filevault. I thought it was a good idea so I did. Everything went well except for the fact that I didn't get a recovery key. Is it possible that a key was not set up? I did pay attention to the dialogs and I didn't dismiss it by accident. Can I add a recovery key? I know I can disable and re-enable Filevault but I don't want to have to re-encrypt my drive.

MacBook Pro with Retina display, OS X Yosemite (10.10), Filevault

Posted on Oct 19, 2014 2:47 AM

Reply
9 replies

Oct 19, 2014 5:56 PM in response to simonpjon

I had this problem too. After some investigation, I discovered that you can ask OS X to create a new recovery key for you from the command line. In a Terminal window, type:


sudo fdesetup changerecovery -personal


You'll need to enter your password for sudo, then the fdesetup utility will prompt you with:


Enter a password for '/':


Enter your password again. The fdesetup utility will then display your new personal recovery key.

Jan 23, 2015 9:20 PM in response to CathyLapin

Hi all,


I think it's great a workaround is available for this problem, thanks for providing it here.. But if a key is not generated when you enable FV then it's broken and Apple should fix this. Does anyone here know why this is happening?


When I encountered this issue, I also noticed I was never asked to set the 3 security questions and answers as well no key.. Just the option to restart.

Sep 29, 2015 11:32 AM in response to singingcosmos

Here's a variation to the problem. I too turned on FileVault because I came across an article advising that I do that. And like many here, I also was not issued a recovery key. I had chosen the option to get access with my login password. But on investigating the matter further, I found instructions per Apple are that you will need a login password and your recovery key should you restart your computer, which we all need to do from time to time. I was concerned now that once I restarted my computer, I would not get access. I do have a backup, and if my iMac crashed, I imagine I could restore via TimeMachine. However, the host of uncertainties was enough to make me turn off FileVault and research the matter more.


I came across this suggestion which sounds great, but it pulled a strange one on me. By that I mean that Terminal never asked for a password for "/". Instead I got: "Enter a password for '/', or the recovery key:" I entered my password and got: "[MY-NAME]s-iMac:~ [my name]$". Does that mean that my login worked?


Another question: During this "crisis," I dug through my old logs from way back when this iMac had Lion and found, of all things, a FileVault recovery key. Has my iMac been keeping that key through all my upgrades?

Yet another question: My computer said that while my iMac was turning off FV, I could use it to do stuff, so I tried using Terminal to disable that old key. When I entered the command to disable I got ".Error: couldn't start decryption: err = -69755" Does that mean it couldn't do that because it was already doing that? Or that I couldn't use Terminal at that time? Or because of something else?


Any information anyone can provide will be much appreciated. I'm wondering if I should use that key or disable or doing something else. I feel like I'm in FileVault limbo.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

No recovery key when enabling filevault in Yosemite upgrade

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.