Escrow Buddy: An open-source tool from Netflix for remediation of missing FileVault keys in MDM

This post introduces Escrow Buddy, a new open-source authorization plugin for macOS. It enables the automatic generation and escrowing of FileVault recovery keys to MDM by utilizing the logging-in user's credentials with the `fdesetup` tool. The post details the problem of missing keys, discusses less ideal existing solutions, and outlines the three-step process for deploying and configuring Escrow Buddy. It also highlights the integration with the `FDERecoveryKeyEscrow` MDM payload and the use of a `defaults write` command for triggering key generation. The contribution emphasizes the security benefits of avoiding user-facing password prompts and promoting a better security culture.