mirror of
https://github.com/apple/device-management.git
synced 2026-07-19 03:27:18 +02:00
Cyrus Daboo
34 lines
1.8 KiB
YAML
34 lines
1.8 KiB
YAML
title: Set Auto Admin Password Command
|
|
description: Allows changing the password of a local admin account that was created
|
|
by Setup Assistant during DEP enrollment via the AccountConfiguration command.
|
|
payload:
|
|
requesttype: SetAutoAdminPassword
|
|
supportedOS:
|
|
macOS:
|
|
introduced: '10.11'
|
|
accessrights: None
|
|
devicechannel: true
|
|
userchannel: false
|
|
requiresdep: true
|
|
userenrollment:
|
|
mode: forbidden
|
|
content: Allows changing the password of a local admin account that was created
|
|
by Setup Assistant during DEP enrollment via the AccountConfiguration command.
|
|
payloadkeys:
|
|
- key: GUID
|
|
type: <string>
|
|
presence: required
|
|
content: The unique identifier of the local administrator account. If this value
|
|
doesn't match the GUID of an administrator account that MDM created during Device
|
|
Enrollment Program (DEP) enrollment, the command returns an error.
|
|
- key: passwordHash
|
|
type: <data>
|
|
presence: required
|
|
content: |-
|
|
The precreated salted SHA-512 PBKDF2 password hash for the account.
|
|
Create this hash on the server using the CommonCrypto libraries, or equivalent, as a salted SHA-512 PBKDF2 dictionary that contains these elements:
|
|
* 'entropy': The derived key from the password hash; for example, from 'CCKeyDerivationPBKDF()'
|
|
* 'salt': The 32-byte randomized salt; for example, from 'CCRandomCopyBytes()'
|
|
* 'iterations:' The number of iterations; for example, from 'CCCalibratePBKDF()' using a minimum hash time of 100 milliseconds, or if unknown, a number in the range of 20,000 to 40,000 iterations
|
|
Place the dictionary that contains these elements into an outer dictionary with the key 'SALTED-SHA512-PBKDF2'. Convert this dictionary to binary data before setting it as the value for 'passwordHash'.
|