I need to turn on FileVault on several Macs. Rather than hit each one individually and disrupt users' days, I thought it would be smart to create a script to do it using fdesetup. I need, however, to allow the user to defer until next login and also specify an institutional recovery key (this has the benefit of not having to code in the user's password).
Then it dawned on me that it's probably already been done. So, does anyone have a script that can activate and defer FileVault on multiple machines while also specifying an institutional recovery key in an automated fashion? The examples I've found so far either require a plist with username/passwords entered in plaintext, or have hardcoded dependencies on JAMF.
I just want something I can run via ARD on a specific set of Macs.