Security

Using Bootstrap Token

macOS 10.15 introduces a new feature—Bootstrap Token—to help with granting a SecureToken to both mobile accounts and the optional device enrollment-created administrator account (“managed administrator”). The managed administrator can be created by configuring an MDM solution to create it during the enrollment process that happens using Apple School Manager or Apple Business Manager. Using the new Bootstrap Token feature of macOS 10.15 requires:

Mac enrollment in MDM using Apple School Manager or Apple Business Manager
MDM vendor support

Note: A Bootstrap Token can’t be generated automatically by macOS during setup if the first user created in Setup Assistant is downgraded to a standard user using MDM or if local user account creation is skipped entirely. If needed, the initially created administrator account in Setup Assistant can be downgraded to a standard user later, or can be abandoned or deleted if not needed (It can’t be deleted or downgraded until at least one other Secure Token–enabled administrator account exists on the Mac). Alternatively, a Bootstrap Token can be generated after macOS setup using the profiles command-line tool.

Hilfreich?

Apple Platform Security

Using Bootstrap Token