Removing unwanted recovery keys from a Cauliflower Vest server
As machines are retired or otherwise taken out of circulation, their recovery keys may not need to stay listed on the Cauliflower Vest AppEngine instance. There isn’t a direct way to remove these keys from the Cauliflower Vest web interface, but it is possible to do this via the App Engine admin console.
To do this:
1. Go to the App Engine admin console at https://appengine.google.com/dashboard?&app_id=your-CV-app_id_here
2. Click on the Datastore Viewer link.
3. In the Query: By Kind menu, select FileVaultVolume. This will produce a list of the encrypted volumes that have escrowed keys.
4. Select the ones you want to remove, then click the Delete button.
Note: There’s no undo function once you hit the Delete button. Please make sure you have selected only the entries you want before clicking Delete.