munkireport / firmware_escrow

Module for munkireport.

Maintainers

Details

github.com/munkireport/firmware_escrow

Installs: 8 829

v1.4 2023-04-04 04:22 UTC

Requires

None

Requires (Dev)

None

Suggests

None

Provides

None

Conflicts

None

Replaces

None

MIT 724c9a18895bdec743026226f51c943163aae885

dev-master
v1.4
v1.3
v1.2
v1.1
dev-mr6-python3
dev-mr5

This package is auto-updated.

Last update: 2024-12-17 19:31:55 UTC

README

Escrow a random Firmware password.

A sample script named firmware-set.sh is provided to generate a random 6 character password and set that password using the firmwarepasswd binary. If you plan to use the sample script, please edit line 51 "${MacIP}" != "172." to an ip range based on your environment. Note that firmwarepasswd is only available on macOS 10.10 and newer.

The module provides the following information in the client details and listings view:

Enabled Date - The data the Firmware password was enabled
Firmware Password - The random password
Firmware Mode - Records the current mode setting

To do

Add a section to the Firmware script to read the database and confirm the password has been recorded before the Mac is rebooted. Prefer if the password to the db wasn't in the script.