Skip to main content

During post-release window for at least the last 4 minor macOS releases, our users have reported that the Mac only lets them unlock with password, not allowing their fingerprint.

If the user restarts the device, then logs in, the fingerprint option for unlocking is available but, reverts to not being available shortly after.

 

This behaviour appears when a new macOS update is released, then is only resolved once the device is updated.

We’ve confirmed that the fingerprint is setup and works for other auth with the device unlocked - never seen this behaviour before, anyone else experiencing this?

For reference, this has happened on at least;

  • macOS 15.4 → 15.4.1
  • macOS 15.4.1 → 15.5
  • macOS 15.5 → 15.6
  • macOS 15.6 → 15.7

Similar things have been happening to our users, too. I think our cause is slightly different but the solution could be the same. We still bind (I know, I know) so whenever we have users change their password through ADSelfService off campus, it wrecks their secureToken especially if FileVault is enabled. I put a script in self service that my techs can run that revokes and redistributes the user’s secureToken and verifies they are also a FileVault user. However, after reading your comment, some of this is most likely a result of the updates. It has been a long time since I tried to paste a script on the forum, but I’m happy to try if you think it would help. Doesn’t add any prevention but it is a pretty quick fix.