TouchID error after updates

[blochcw]

We disable TouchID for our Macs through a configuration profile. But when an update installs for either High Sierra or Mojave, the user is presented with a dialog indicating that TouchID setup failed requiring the user to click "setup later" and then continue. Anyone know of a way to skip this error?

[Mauler]

Did you ever figure this one out? Having the same issue.

[sshort]

@Mauler @blochcw If you're just disabling Touch ID with a restrictions profile, you'll also want to skip the Setup Assistant screen that prompts a user to enroll in Touch ID.

For new DEP enrollments, this would be covered by skipping the Touch ID screen in your PreStage. You can also create a custom configuration profile with something like ProfileCreator, and then upload that to Jamf to disable the Touch ID enrollment screen from appearing after a future software update.

[Mauler]

@sshort

Thanks for replying! I tried making a profile with the Skip TouchID payload but for some reason when uploading it to JAMF, there isn't any payload. Pretty much any time a new user logs into a lab MacBook with a touchID, the users get prompted that TouchID setup failed. I've also tried bioutil -w -f 0 -s with no luck.

[sshort]

@Mauler for custom profiles, it's expected behavior to not see any payload info in the Jamf interface. If you push the profile you made to a test machine, and then sign in as a new account for the first time are you still seeing the Touch ID enrollment screen?

There's definitely a timing issue when you skip something with Setup Assistant. If the Mac has already been setup, then a profile will affect future users that login. If the goal is for a new out-of-box Mac to not see this screen, then the profile needs to be in place before going through initial setup, so if you're on Jamf 10.10 or later there will be an option in PreStage to set profiles that must be installed before the user continues on in Setup Assistant.

[Mauler]

@sshort

If you push the profile you made to a test machine, and then sign in as a new account for the first time are you still seeing the Touch ID enrollment screen?

Yup, still getting it on new accounts on an already configured test MacBook. I'll try adding it to the OOB Pre-Stage Enrollment and reinstall Mojave to see what happens. Thanks again!