Skip to content
This repository was archived by the owner on Nov 20, 2024. It is now read-only.

Advanced

Jump to bottom
Tyler Morgan edited this page Nov 5, 2020 · 2 revisions

This section outlines some of the more advanced features of Filevault Reissue.

Silent Reissue Attempt

If you have a company or school with standard local administrator accounts and know their passwords, this might help enhance the end user experience. When using this advanced feature, the only time the user would get prompted for their credentials is if:

  • The administrator accounts don't exist, or not enabled in Filevault
  • The administrator passwords don't match those provided

Using the below command, --admin-usernames accepts usernames split with a comma between them like: admin1,admin2. --admin-passwords do the same thing where password1,password2 both would be attempted.

sudo "/Library/Application Support/Acme/Filevault Reissue.app/Contents/MacOS/Filevault Reissue" --admin-usernames="macadmin","itadmin" --admin-passwords="p@ssword2","P@sSW0rD"

Security Note

It should be noted that using this method would allow people to use ps -ax to possibly see the application running with the specified username and passwords. This would only affect environments where the end user is an administrator.

Clone this wiki locally