Creating a macOS FileVault Recovery Key Escrow profile involves generating a public/private key pair and then using the public key to encrypt the FileVault recovery key.     You can use a tool like OpenSSL to generate a public/private key pair. The private key should be kept secure, as it will be used to decrypt the FileVault recovery key.   In the Meraki dashboard, create a new profile and select the ‘FileVault Recovery Key Escrow’ payload. In the ‘EncryptCertPayloadUUID’ field, enter the UUID of the payload that contains the public key. This will be used to encrypt the recovery key.   Once the profile is created, you can apply it to your devices. The devices will then escrow their FileVault recovery keys, encrypted with the public key, to the Meraki dashboard.   Please note that the certificate file used for the ‘EncryptCertPayloadUUID’ field should be in PEM format. If you’re having trouble generating a PEM certificate, you might want to check the commands you’re using with OpenSSL.   The typical command to generate a PEM encoded certificate is something like this:   openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout server.key -out server.crt   This command generates a new RSA key (server.key) and a self-signed certificate (server.crt). Both are in PEM format. ... View more

Meraki Systems Manager allows you to create and enforce various passcode policies on enrolled devices. These policies can specify requirements for passcode strength, alphanumeric values, minimum length, complex characters, maximum passcode age, auto-lock, and maximum number of failed attempts.   These policies are applied to the devices themselves and not to specific networks. This means that once a passcode policy is applied to a device, the user will need to enter the passcode regardless of the network they are connected to. ... View more