I require to fetch below few details on FileVault enabled users. 1)Private recovery key set or not 2)Institutional recovery key set or not 3)Authorized on every logon - supported or not. Which commands will help us to fetch these details for File-Vault enabled users. I want to get these details as a part data collection.
man fdesetup :
haspersonalrecoverykey [-device] [-verbose] Returns the string "true" if FileVault contains a personal recovery key. hasinstitutionalrecoverykey [-device] [-verbose] By default, this will return the string "true" if FileVault contains an institutional recovery key. On CoreStorage volumes specified using the --device option, this will return the hex representation of the public key hash instead of "true". The hash option is not supported for APFS volumes. This will return "false" if there is no institutional recovery key installed. usingrecoverykey [-verbose] Returns the string "true" if FileVault is currently unlocked using the personal recovery key. supportsauthrestart Returns the string "true" if the system supports the authenticated restart option. Note that even if true is returned, this does not necessarily mean that authrestart will work since it requires that FileVault be enabled.