Your company may have a form of training or instruction in their policy about how to harden your laptop. Having a password-protected screensaver on your Mac adds an extra line of protection for you and your company. But for the sake of security, you should avoid doing this. Many people are likely to disable the password-protected feature of their screensaver for the sake of convenience and time. To enable smart card log-in, this shall be changed to that FileVault2 will accept users password, but thereafter the smart card will be required to log into the MacOS.A simple security step that can make all the difference
2) Disable FileVault2 (Hard Drive Encryption) password passthrough configurationīy default, when a user enters their password to decrypt the FileVault disk at boot, this password will be passed through and a smart card will not be used for login. The combination of those two settings will cause your Mac to automatically lock and immediately require the password (and only from the Smart Card!) before letting you back in. It’s worth noting this option only appears after a smart card device has been paired to a macOS user. The second setting is found by clicking the padlock, then the Advanced button and it’s the tick box marked Turn on screen saver when login token is removed. There’s a couple of options we can use to further improve OS security with regards to using Smart Cards and these can be found in System Preferences, in the Security & Privacy pane.įirst is to set Require password immediately so that you are always prompted to authenticate from the screensaver or from sleep.
1) Activating the screen saver when smart card will be removed
0 kommentar(er)
