This will also be when I move macOSLAPS to Swift 5. What this means is that those users using macOSLAPS on 10.14.3 or lower will need to install the Swift 5 Runtime Support for Command Line Tools.
This is significant because any newer versions of Xcode DO NOT include the Swift binaries. The current version posted on GitHub 1.1.4 Build 230 will most likely be the LAST version that will be built with Xcode 10.1. After this, it will use the System keychain one. macOSLAPS will read this password in the first time to change the password. I have added the new key to the confiuration profile that will allow you to place a burner password which is a password set initially by your MDM for the secureToken admin account. This is where the new firstPass option comes in. This would allow us to read the keychain item when it is time for a password change and thus be able to change a secureToken user. Thanks to Joel Rennich, I decided to save the LAPS password in the System keychain on the local system. To achieve this we had to know the old password of the LAPS account. What this means is that you can have a LAPS FileVault user and the password will update. I am excited to announced that the latest version of macOSLAPS now has secureToken support. It’s been a while since I talked about this GitHub project.
0 kommentar(er)
