Some Macs with a FileVault 2 Recovery Key Redirection config profile get stuck on "escrowing recovery key"

Originator:kitzy
Number:rdar://25625649 Date Originated:08-Apr-2016
Status:Open Resolved:
Product:OS X Product Version:10.11.x
Classification: Reproducible:Sometimes
 
Summary:
Some Macs in our environment that have a FileVault 2 Recovery Key Redirection configuration profile get stuck on "escrowing recovery key" when attempting to rotate the recovery key. This is happening on about 12% of our fleet.

Steps to Reproduce:
1. Enroll a Mac in Casper
2. Apple a Recovery Key Redirection profile to escrow the key in the JSS
3. Run `sudo fdesetup changerecovery -personal -verbose` in terminal

Expected Results:
The key would rotate and be escrowed in the JSS.

Actual Results:
The key rotates, but gets stuck on escrowing.

Version:
10.11.x

Notes:


Configuration:
This is affecting MacBook Pros, MacBook Airs and Mac Minis in our org.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!