Skip to main content
Question

Extension Attribute to check if Firmware password is set


Forum|alt.badge.img+18
  • Esteemed Contributor
  • 831 replies

Hey all,
So the old Extension Attribute "EFI Password Mode" seems not to function in 10.12 and I was looking to see if anyone had created an update for it before I started to reinvent the wheel.
Old one pasted below:

#!/bin/sh
result=`nvram -p | grep security-mode | awk '{print $2}'`

if [ "$result" != "" ]; then
    echo "<result>$result</result>"
else
    echo "<result>none</result>"
fi

Gabe Shackney
Princeton Public Schools

3 replies

Forum|alt.badge.img+15
  • Esteemed Contributor
  • 719 replies
  • May 17, 2018

You should be able to replace the nvram line with "firmwarepasswd -check" and have something that'll work.


Forum|alt.badge.img+4

Below is what I use, works fine in 10.12

!/bin/sh

####

firmwarePass="$(firmwarepasswd -check)";

if [ "$firmwarePass" == "Password Enabled: Yes" ]; then echo "<result>Set</result>";
else echo "<result>Not Set</result>"
fi


Forum|alt.badge.img+18
  • Author
  • Esteemed Contributor
  • 831 replies
  • May 17, 2018

@cbrewer @Chris.Tavenner Thanks both!
Working great now. Guess we should submit it to be updated in the JSS built in template.
Gabe Shackney
Princeton Public Schools


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings