Escrow Buddy: A tool for escrowing missing FileVault recovery keys | Elliot Jordan at MacAD.UK 2024

Escrow Buddy is an open-source tool for Mac IT and security administrators who escrow FileVault personal recovery keys to their MDM. For Macs that do not have a valid recovery key in escrow, Escrow Buddy securely and transparently generates a new key during the standard macOS login process and triggers its escrow.
In this session, Elliot Jordan will cover the reasons FileVault recovery keys might be missing from your MDM, share context on the pitfalls of existing password-prompt workflows aimed at solving the problem, and explain why Escrow Buddy offers a more evolved and scalable solution for modern Mac admins.
Using Netflix’s large fleet of managed Macs as a case study, you’ll learn how simple it can be to simultaneously fulfil the competing needs of information security and user convenience. Elliot dives into some technical aspects of how Escrow Buddy does its work, but rest assured that you don’t need to be a developer to simply deploy and reap the benefits in your own organisation.

[@summoner2100]

Had to get some filevault ones updated a few months ago. but too many to do manually. So setup escrow buddy. Loved it, brilliant tool