The personal recovery key is generated when FileVault 2 encryption is enabled and remains valid until the personal recovery key is changed or the disk is decrypted using that key.

Escrow PRK

To view an escrowed recovery key, perform the following within the Device Details page on the AirWatch Console.

  1. Select the Security tab.
  2. Select View Recovery Key.
  3. Note the recovery key that is escrowed.
  4. Select Close when finished viewing the key.

If an encrypted macOS volume is decrypted and then re-encrypted, the previous personal recovery key would be invalidated and a new one created as part of the re-encryption process.