Personal recovery encryption is useful if the user wants the benefit of viewing and keeping a Personal Recovery Key from decrypt. To encrypt a device using a Personal Recovery Key:

  1. Configure a new Disk Encryption profile.
  2. Choose Personal as the recovery type and configure the recovery key settings as needed.

Once FileVault is enabled on the device, the Personal Recovery Key will be reported to a Workspace ONE UEM server or another designated server.