# Retrieve the full FileVault encryption settings details for a given encryption_settings_id

Get the file vault settings details

## Endpoints

[GET /api/v1/mdm/profiles/filevaults/{encryption_settings_id}](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mac-get-filevault-encryption-settings.html)

## Request URL

```text
https://{server-hostname}:8383/api/v1/mdm/profiles/filevaults/{encryption_settings_id}
```

## Scope

```text
MDMDeviceMgmt.READ
```

## Header

```text
Authorization: d92d4xxxxxxxxxxxxx15f52
```

## Request Parameters

### Request Headers

- **Accept** `string` — Mandatory: `application/json`

### Path Parameters

- **encryption_settings_id** `string` — Mandatory

  Unique identifier of the encryption settings. Obtain from the response of [Create FileVault Encryption Settings API](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mac-add-filevault-encryption-settings.html)

## Sample Request

```curl
curl --request GET \
  --url https://appdomain/api/v1/mdm/profiles/filevaults/{encryption_settings_id} \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP code 200

Response Body — `application/json`

- `JSON Object`
  - **mdmencryptionsettings** `JSON Object`

    Core encryption settings with assigned encryption_settings_id

  - **mdmfilevaultsettings** `JSON Object`

    FileVault-specific settings

  - **mdmfilevaultpersonalkeyconfiguration** `JSON Object`

    Personal recovery key configuration with assigned certificate IDs (present when encryption_settings_type is 1 or 3)

  - **mdmfilevaultinstitutionconfiguration** `JSON Object`

    Institutional recovery key configuration (present when encryption_settings_type is 2 or 3)

## Possible Response Codes

- **200** `HTTP code`

## Sample Response: HTTP 200

FileVault encryption settings details (Personal and Institutional)

```json
{
  "mdmfilevaultsettings": {
    "copy_recovery_key_to_mdm": true,
    "dont_allow_filevault_disable": false,
    "recovery_key_type": "3",
    "maximum_attempts_to_force": "-1",
    "force_encryption_until_logout": false,
    "ask_enable_during_logout": false,
    "message_to_user": "The personal recovery key is stored in the MDM server. Contact your administrator to retrieve it."
  },
  "mdmfilevaultinstitutionconfiguration": {
    "institution_encryption_cert": "6967000001030029"
  },
  "mdmfilevaultpersonalkeyconfiguration": {
    "show_recovery_key": false,
    "recovery_key_identifier": "6967000001030023",
    "enable_ec_agent_prk_rotation": false,
    "recovery_encrypt_cert_id": "6967000001030023"
  },
  "mdmencryptionsettings": {
    "modified_user": "6967000000047005",
    "added_time": "1777444564220",
    "modified_time": "1777444564220",
    "encryption_settings_type": "3",
    "added_user": "6967000000047005",
    "settings_desc": "",
    "customer_id": "6967000000047017",
    "encryption_settings_id": "6967000001030020",
    "settings_name": "Combined FileVault Settings"
  }
}
```

**Duration:** 1 minute | **Threshold:** 120 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.