So, we are recruiting for some remote positions and onboarded a few recruits across the country. We sent them M1 macs for office use. We configured a FileVault policy and enabled FileVault encryption on these devices. Unfortunately, we forgot to Escrow the Personal Recovery Key while configuring the policy.
Fetching these devices back is definitely a no-go. The help doc mentions, “Once set up, removing the policy or disassociating devices does not disable FileVault.” Will it be possible to disable FileVault remotely through Hexnode before reapplying the policy?