Personal recovery encryption is useful if the user wants the benefit of viewing and keeping a Personal Recovery Key from decrypt. To encrypt a device using a Personal Recovery Key:
- Configure a new Disk Encryption profile.
- Choose Personal as the recovery type and configure the recovery key settings as needed.
Once FileVault is enabled on the device, the Personal Recovery Key will be reported to a Workspace ONE UEM server or another designated server.