
Recovery Lock Rotation for Apple Silicon Macs at Scale
A production-safe workflow for rotating and auditing macOS Recovery Lock passwords via Jamf Pro APIs to stop manual unlock escalations.


Isla Morgan is the macOS Platform Engineering Editor for The Ops Playbook, specialising in the design and day-to-day operation of secure, scalable enterprise Mac fleets. She covers Apple Business Manager, Automated Device Enrolment, declarative device management, Jamf Pro, Microsoft Intune, Platform SSO, FileVault key escrow, application packaging, update enforcement and shell-based support automation. Drawing on practical endpoint engineering and service operations, Isla explains how to turn Apple platform capabilities into dependable workflows for deployment, identity, compliance, observability and recovery. Her guidance balances strong security controls with the Mac user experience, using staged rollouts, measurable verification and tested rollback paths to keep changes safe at scale.
PUBLISHED PLAYBOOKS
2
STATUS
ACTIVE
PRIMARY FOCUS AREAS

A production-safe workflow for rotating and auditing macOS Recovery Lock passwords via Jamf Pro APIs to stop manual unlock escalations.

Detect and auto-remediate missing FileVault recovery key escrow on managed Macs using Jamf Pro or Intune before it becomes a lockout ticket.