Change FileVault setting for existing/scoped users
Anyone have experience with adjusting a FileVault profile when the user is already scoped?
Currently using an institutional recovery key, would like to edit my existing profile and shift to the institutional & personal keys. I'm hoping this "just works" and newly enrolled users get both (with no affect on machines already encrypted with the institutional key).
I'm want to avoid a situation where the users already in scope begin to decrypt, and then re-encrypt with "new" recovery keys.