News for hackers. Stuff that matters.

A comment on State of S3 – Your Laptop is no Laptop anymore – a personal Rant. Parent comment

Re:State of S3 – Your Laptop is no Laptop anymore – a person... by angulardragon03 on Wednesday September 04, 2024 @06:29AM (#41443991)
IIRC you can’t run updates while the laptop is asleep though, as that typically requires a user password to initiate. Even with MDM you can’t force updates during sleep
[ Parent | on HN ]
Re:State of S3 – Your Laptop is no Laptop anymore – a person... by newdee on Wednesday September 04, 2024 @05:43PM (#41451192)
That problem is solved by the Bootstap Token in modern macOS and MDMs which support it. The token gets escrowed with the MDM during enrolment and can be used to unseal the volume for updates without prompting for a password. Good for unattended updates to kiosks or whatever.
[ Parent | on HN ]