firmware password recovery for company-owned macs

TL;DR

A lost firmware password on a company-owned Mac is recoverable through legitimate channels: the MDM escrow if you set one, or Apple with proof of purchase. This only applies to devices your organization owns; there is no supported bypass for anyone else's machine.

The query

firmware password recovery for company-owned macs

Use this when

• firmware password lost on a company Mac
• setting up firmware password escrow going forward
• preparing proof of ownership for Apple

Not for

• bypassing a firmware password on a device you do not own
• personal Macs (use Apple support as the owner)
• removing activation lock (different process)

Steps

1. Check whether your MDM escrowed the firmware password or recovery key. Expected output: escrow checked
2. If escrowed, retrieve it through the MDM console and unlock the Mac. Expected output: Mac unlocked
3. If not escrowed, gather proof of purchase for the device. Expected output: ownership documentation ready
4. Contact Apple or an authorized service provider with the proof of purchase. Expected output: service case opened
5. After recovery, set a new firmware password and escrow it this time. Expected output: escrow in place
6. Document the recovery in the asset record. Expected output: record updated

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_oqI30P0PM69Xl--FOlNsmg