Macs with Apple CPU cannot be protected with EFI password

Macs equipped with Apple’s own M1 processor cannot be provided with an efi password. This makes it possible for malicious parties to start the computers from another medium or to remove and reinstall them.

Setting an efi password is usually done by companies and schools via mobile device management (mdm). The password protection ensures that various boot options, including recovery mode, cannot be selected. With this option missing, administrators will have to look for other ways to prevent users from self-managing the computers.

Apple says administrators can still secure computers by encrypting the entire hard drive with FileVault. Malicious people may no longer be able to access the data on the disk, but the device can still be cleared.

Nathaniel Strauss, administrator of Macs at a US comprehensive school, complains in a blog post that this change will allow users to turn a system fully managed and enrolled via mdm into an unmanaged system with admin rights within hours.

Strauss goes on to complain that Activation Lock is not an option at the moment, as Apple only supports this feature on iOS devices. The administrator refers to a feature request from Apple admin community Jamf. Apple has not yet responded to the complaints from administrators.


Mathaniel Strauss shows in this screenshot how easily users can clear the Mac

Sources: NWStrauss, Jamf


Source: Hardware Info Compleet by nl.hardware.info.

*The article has been translated based on the content of Hardware Info Compleet by nl.hardware.info. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!

*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.

*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!