Hi,
I've just learned that enabling FileVault via Endpoint Encryption won't actually allow a user to reset their AD password on a Mac due to Endpoint Encryption not understanding the Mac algorithm. I called up Symantec support who suggested using an Apple Institutional Key. However, the PKG install file setup process only accepts .CER files, which, according to Apple's instructions, need to be deleted as part of the key creation process.
My question - how do I generate this .CER file that will allow users so that the Mac can be accessed via this method?
Thanks in advance!