Easiest way is to hold down "alt" on startup. If you have a firmware password, it will display a padlock.

For something as old as 10.9, you would need to (try to) boot to Recovery HD by holding down Command + R at boot. If you don't get a firmware password prompt, then there's no firmware password. If you do get a prompt, then there's a password.
More recent versions of macOS have a command line binary built in to check the firmware state.

Have we tried

sudo firmwarepasswd -check

@donmontalvo Given the OS 10.9.5 mentioned, firmwarepasswd -check isn't going to work. That appeared in 10.10 I believe.

I use an extension attribute to check. But like @mm2270 said, it will only work in 10.10 and above.

#!/bin/sh

result=`/usr/sbin/firmwarepasswd -check`



if [[ "$result" == "Password Enabled: Yes" ]]; then

echo "<result>Set</result>"

else

echo "<result>Not Set</result>"

fi

@ant89 sorry for being a noob here, but what is an extension attribute? where do I insert that script you posted?

@jpbuono - Settings -> Computer Management - Management Framework -> extention attributes.

Once added. it should show up once the computer has done an updated inventory check.

Hi,
Can we add the command to set a password if result is Not set ?