fdesetup usingrecoverykey fails on high Sierra 10.13

FileVault2 commandline tool fdesetup is showing regression on High Sierra 10.13. We even tested on 10.13.3 beta2 with no success.


The command 'fdesetup usingrecoverykey' fails and gives output 'This command is not supported on APFS volumes'.

It used to return true/false until 10.13.


We use this command to determine if the system is unlocked using recovery key and force rotation of recovery key for better security.

Any idea if there is a change in command to identify this scenario. Also, can you suggest any workaround to find out if the system is unlocked using recovery key?

Alas, you’re asking for help in the wrong place. DevForums is a place to discuss developer-level issues, like Apple’s developer tools and the APIs in our various platform SDKs. It’s not the best place to seek user-level help (and that includes command line tools, like

fdsetup
). You should repost your question over on the Apple Support Communities, run by AppleCare. Alternatively, you can escalate this via an official AppleCare support channel [1].

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

[1] Normal AppleCare support channels can’t help you with command line tools, but AppleCare offers a variety of paid-for support options that do. I don’t work for AppleCare, and thus am not able to discuss those options in detail, but I figured you might find the following links useful:

Thanks eskimo. I've posted the question on Apple Support Communities, as you suggested.

fdesetup usingrecoverykey fails on high Sierra 10.13
 
 
Q