This article explains how to gather information about the availability of a FileVault recovery key for Apple Macs from the SafeGuard database using SQL commands.
Applies to the following Sophos product(s) and version(s)
Sophos SafeGuard Disk Encryption for Mac 6.10.
What To Do
In order to check the availability of a FileVault recovery key, a SQL script can be used that checks whether the machines which are registered in the DB have a key assigned or not.
- Run the attached SQL statement in the SQL Management Studio. This produces a list of computer objects which do not have a recovery key assigned.
Important: On Macs which are running OSX 10.8 there is no validity check when the client sends the recovery key to the server. If the recovery key was typed in incorrectly, a recovery will not be possible.