Note:
To use an institutional recovery key, you must first create and export a recovery key using Keychain Access. If you plan to use only personal recovery keys in your environment, you do not need to perform this workflow.
You can export the recovery key with or without the private key. Exporting with the private key allows you to store it in Jamf Pro. If you export without the private key, you must store it in a secure location so you can access it when needed.
Note:
You cannot use an institutional recovery key with a private key to activate FileVault Disk Encryption using a configuration profile in Jamf Pro. You must create and deploy the disk encryption configuration using a policy in Jamf Pro.