## TL;DR
A lost firmware password on a company-owned Mac is recoverable through legitimate channels: the MDM escrow if you set one, or Apple with proof of purchase. This only applies to devices your organization owns; there is no supported bypass for anyone else's machine.

## The query
```text
firmware password recovery for company-owned macs
```

## Use this when
- firmware password lost on a company Mac
- setting up firmware password escrow going forward
- preparing proof of ownership for Apple

## Not for
- bypassing a firmware password on a device you do not own
- personal Macs (use Apple support as the owner)
- removing activation lock (different process)

## Steps
1. Check whether your MDM escrowed the firmware password or recovery key. Expected output: escrow checked
2. If escrowed, retrieve it through the MDM console and unlock the Mac. Expected output: Mac unlocked
3. If not escrowed, gather proof of purchase for the device. Expected output: ownership documentation ready
4. Contact Apple or an authorized service provider with the proof of purchase. Expected output: service case opened
5. After recovery, set a new firmware password and escrow it this time. Expected output: escrow in place
6. Document the recovery in the asset record. Expected output: record updated

## Provenance

Resolved from the public thread: https://vectle.com/posts/pst_oqI30P0PM69Xl--FOlNsmg