Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
If you have managed Macs with remote work for any length of time, you know the specific sense of issue that comes with having to restart. You have a long wait for the screen-sharing part to come back online. The problem isn’t the network. The problem boils down to FileVault. When a modern Mac reboots, it shows a pre-boot macOS login screen that is not yet fully connected to the network or has not yet loaded the full OS. It is encrypted, secure, and completely unreachable until someone physically types a password. For IT folks managing a fleet of devices in various locations, this is a nightmare. Twocanoes Software has a tool called Password Utility that finally fixes this annoyance, and for $10 a year, it belongs on every Apple Silicon Mac you manage remotely. I found this tool because I recently had this issue with a Mac I manage so I went searching for a solution.
About Apple @ Work: Bradley Chambers managed an enterprise IT network from 2009 to 2021. Through his experience deploying and managing firewalls, switches, a mobile device management system, enterprise grade Wi-Fi, 1000s of Macs, and 1000s of iPads, Bradley will highlight ways in which Apple IT managers deploy Apple devices, build networks to support them, train users, stories from the trenches of IT management, and ways Apple could improve its products for IT departments.
FileVault loops and the solution
Apple’s security is world-class, but it often comes at the expense of manageability for macOS. FileVault is essential for protecting your data, but it creates a dark state during the reboot process. When FileVault is enabled, running a macOS update becomes impossible. You have to rely on a user to be physically present to unlock the disk before the OS even loads. I recently encountered a similar situation where I was in front of a Mac, but it didn’t have a keyboard or mouse attached. I could ping it, but couldn’t get connected, so I had to go track one down to log in.
Password Utility solves this by enabling an authenticated restart workflow. It effectively stages the credentials so that when the Mac reboots, it automatically unlocks FileVault and boots all the way to the macOS login window.
This means the Mac joins the Wi-Fi/Ethernet, and it’ll check in with your device management server. Most importantly, it allows you to start a remote screen-sharing session. You can run a macOS update overnight and know it’ll be accessible afterwards.
Touch ID
While the reboot feature is the killer app for IT admins, the tool also offers some nice quality-of-life improvements for end users. It allows you to bind Touch ID to the sudo command in Terminal with a simple toggle, so you no longer have to type your password every time you need to run a command.
It also encourages better security practices because you can use Touch ID to “paste” your local password, and IT teams can enforce complex, 20-character passwords that users never actually have to type. They authenticate with their fingerprint, and the utility handles the rest.
Wrap up
At $10 per device per year, Password Utility is a cost-effective insurance policy for Macs you don’t have physical access to. It provides clear visibility into Secure Token status and ensures that a reboot doesn’t render the Mac essentially offline. Check it out.
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
FTC: We use income earning auto affiliate links. More.
