Administrator Guide
Prerequisites
● An external bootable drive
● The Device ID/Unique ID of the computer targeted for recovery. In most cases, you can find the computer targeted for
recovery in the Management Console by searching for the owner's user name and viewing the devices encrypted for that
user. The format of the Device ID/Unique ID is "John Doe's MacBook.Z4291LK58RH".
● The Dell installation media
Management Console - Save the recovery bundle
1. Open the Management Console.
2. In the left pane, click Populations > Endpoints.
3. Search for the device to recover.
4. Click the device name to open the Endpoint Detail page.
5. Click the Details & Actions tab.
6. Under Shield Detail, click the Device Recovery Keys link.
7. To save the recovery bundle to the external recovery volume or computer that will be running the recovery utility to perform
the recovery operation, click Download and click Save.
8. Enter a location for the recovery bundle and click Save.
Process - Mount the .dmg
1. Copy the recovery bundle and the Dell-Encryption-Enterprise-<version>.dmg file to the bootable USB drive.
2. Boot the target computer from a pre-created external full-operating system install volume by holding down the Option key
while you restart this computer and then selecting the external full-operating system install volume in the pre-boot Startup
Manager. To create a bootable volume, refer to https://support.apple.com/en-us/HT202796.
3. Mount the Dell-Encryption-Enterprise-<version>.dmg.
Process - Launch the Dell Recovery Utility and recover the FileVault volume
1. In the Utilities folder located in the Dell installation media, launch the Dell Recovery Utility.
The Dell Recovery Utility > Select Volumes dialog displays.
NOTE:
The Recovery Utility must be the same or newer version than the version of client software installed on the computer
targeted for recovery.
2. In the Dell Recovery Utility > Select Volumes, select the FileVault volume.
● When recovering an operating system, the best practice is to boot to a computer with the same operating system or
higher.
● If you have non-boot volumes encrypted, typically, you will recover the boot partition first.
3. Click Continue.
4. Locate and select the recovery bundle (saved earlier) and click Open.
5. If the Select Recovery Record dialog displays, view the Escrow Date column, select the most recent date for the Personal
Recovery Key type, and click Continue.
NOTE:
With an older escrow date, the key may no longer be valid.
The Recovery Operation Result displays.
● For boot drives, the recovery tool provides a personal recovery key that allows you to boot using standard Apple FileVault
recovery. You can boot into the target partition and enter the personal recovery key for Pre-Boot-Authentication, which
may vary depending on the operating system.
● For non-boot drives, only the personal recovery key displays. An Unlock button is provided to unlock and mount the
volume.
6. Do one of these:
● Recover the boot volume (most common)
● Recover a non-boot volume (rarely used)
Recover the boot volume (most common)
For most recovery cases, use this option to recover the boot volume:
Tasks for the Encryption Client
27