mirror of
https://github.com/apple/device-management.git
synced 2026-07-10 21:13:42 +02:00
Cyrus Daboo
54 lines
2.2 KiB
YAML
54 lines
2.2 KiB
YAML
title: Set Auto Admin Password Command
|
|
description: Update the local administrator account password.
|
|
payload:
|
|
requesttype: SetAutoAdminPassword
|
|
supportedOS:
|
|
iOS:
|
|
introduced: n/a
|
|
macOS:
|
|
introduced: '10.11'
|
|
accessrights: None
|
|
devicechannel: true
|
|
userchannel: false
|
|
supervised: false
|
|
requiresdep: true
|
|
userenrollment:
|
|
mode: forbidden
|
|
tvOS:
|
|
introduced: n/a
|
|
visionOS:
|
|
introduced: n/a
|
|
watchOS:
|
|
introduced: n/a
|
|
content: Allows changing the password of a local admin account that was created
|
|
by Setup Assistant during ADE enrollment via the AccountConfiguration command.
|
|
payloadkeys:
|
|
- key: GUID
|
|
type: <string>
|
|
presence: required
|
|
content: The unique identifier of the local administrator account. If this value
|
|
doesn't match the GUID of an administrator account that MDM created during Automated
|
|
Device Enrollment (ADE) enrollment, the command returns an error.
|
|
- key: passwordHash
|
|
type: <data>
|
|
presence: required
|
|
content: |-
|
|
The precreated salted SHA-512 PBKDF2 password hash for the account.
|
|
|
|
Create this hash on the server using the CommonCrypto libraries, or equivalent, as a salted SHA-512 PBKDF2 dictionary that contains these elements:
|
|
|
|
- `entropy`: The derived key from the password hash; for example, from `CCKeyDerivationPBKDF()`
|
|
- `salt`: The 32-byte randomized salt; for example, from `CCRandomCopyBytes()`
|
|
- `iterations:` The number of iterations; for example, from `CCCalibratePBKDF()` using a minimum hash time of 100 milliseconds, or if unknown, a number in the range of 20,000 to 40,000 iterations
|
|
|
|
Place the dictionary that contains these elements into an outer dictionary with the key `SALTED-SHA512-PBKDF2`. Convert this dictionary to binary data before setting it as the value for `passwordHash`.
|
|
notes:
|
|
- title: ''
|
|
content: Refer to the following sections to determine supported channels and requirements,
|
|
and to see an example request and response.
|
|
examples:
|
|
- title: Example request and response
|
|
files:
|
|
- request-file: examples/mdm/commands/set.auto.admin.password/example1.plist
|
|
response-file: examples/mdm/commands/set.auto.admin.password/example2.plist
|