---
title: RotateFileVaultKeyCommand.Command
framework: devicemanagement
role: symbol
role_heading: Device Management Command
path: devicemanagement/rotatefilevaultkeycommand/command-data.dictionary
---

# RotateFileVaultKeyCommand.Command

The command to change the FileVault primary password on a device.

## Declaration

```data
object RotateFileVaultKeyCommand.Command
```

## Properties

FileVaultUnlock: A dictionary that contains FileVault unlock options. KeyType: The type of FileVault key you want to change the password for. Set this value to personal and set a value for Password in the FileVaultUnlock dictionary to enable unlocking a device with a password. Set this value to institutional and set values for PrivateKeyExport and PrivateKeyExportPassword in the FileVaultUnlock dictionary. NewCertificate: A DER-encoded certificate for creating a new institutional recovery key, which the system requires if KeyType is institutional. ReplyEncryptionCertificate: A DER-encoded certificate for encrypting the new personal recovery key in a wrapper conforming to the IETF Cryptographic Message Syntax (CMS) standard. RequestRequiresNetworkTether: If true, the device needs to be network-tethered to run the command. RequestType: The request type for this command.

## Topics

### Objects

- [RotateFileVaultKeyCommand.Command.FileVaultUnlock](devicemanagement/rotatefilevaultkeycommand/command-data.dictionary/filevaultunlock-data.dictionary.md)