M1 Secure Token Check

Why would you use the M1 Secure Token Check Worklet?

This M1 Secure Token Check Worklet will check an M1 device to ensure the Automox Service Account has a secure token, and if it is passable via the currently logged-in user.

How to check the M1 Secure Token with this Worklet

The first script checks if the current user has a secure token and will read out to the Automox console whether they do or not. If they don't, this does not mean a secure token can't be passed to the Automox Service Account. 

The second script checks if the Automox Service Account is present on the device and if not, the script will break and read out to the console. The third script will check the secure token status of the Automox Service Account and will read to the console if it has it or not.

What is the expected outcome when using the M1 Secure Token Check Worklet?

Once executed, the M1 Secure Token Check Worklet will deliver one of the following messages: "The Automox Service account has Secure Token enabled. No further action is required," or  "The Automox Service account does not have Secure Token enabled." If the token isn't enabled but should be, you can then take appropriate action to enable it.

What is a secure token?

Secure tokens are physical devices or software mechanisms that serve as hardware authenticators, allowing individuals to securely access a system. These tokens are often equipped with cryptographic information unique to each user, which facilitates user authentication within a specific system. Alternatively, a secure token can be described as a protected form of a key encryption key (KEK), wrapped in the user's password.

In addition to or instead of traditional passwords, secure tokens can be employed for various purposes. They are commonly utilized to gain entry into computer networks and can also function as electronic signatures for documents. Secure tokens play a crucial role in enabling two-factor authentication, offering an extra layer of security.

Within this context, they can be utilized for admin accounts, user accounts, including active directory mobile accounts, and the creation of new user accounts. Additionally, secure tokens can be leveraged to manage system preferences and grant secure tokens to an authorized admin account, local admin account, or user account.

What is an M1 device?

An M1 device refers to a type of computer hardware developed by Apple. The M1 chip is a system-on-a-chip (SoC) designed specifically for Apple's Mac computers, including the MacBook Air, MacBook Pro, Mac Mini, and iMac. It’s based on ARM architecture and marks a transition away from Intel processors, which were previously used in Macs.

The M1 chip integrates multiple components, including the central processing unit (CPU), graphics processing unit (GPU), neural engine, memory, and other system controllers, onto a single chip. This consolidation of components allows for improved performance, energy efficiency, and overall system integration. The M1 chip is known for its high-performance capabilities, low power consumption, and efficient software optimization, which results in faster and more responsive computing experiences.

Apple's M1 devices have received positive reviews for performance, extended battery life, and seamless integration with macOS. .