9.98 Disallow TouchID for macOS

[DBrowning]

Installed 9.98 in my test environment, and set a device policy to no allow touch ID to work. Yet it still works.... anyone else see this?

[stevehahn · Accepted solution]

If I'm not mistaken, the ability to block Touch ID by config profile is coming in 10.12.4--so if your client Mac is on 10.12.3 or earlier the profile won't do anything.

[donmontalvo]

10.12.4 Beta 8 came out a few days ago, wouldn't be surprised to see it drop in the coming days.

[DBrowning]

tested on a machine with 10.12.4 beta 8 this morning and it works.

If someone already has touchID enabled, it disables but doesn't prevent access to the System Pref. When waking the machine from sleep or screen saver, there is just a note "Your password is required to enable TouchID".

I was able to make that message go away by running sudo bioutil -w -f 0 -s

which will disable the touchID functionality system wide.