The Bootstrap Token lets Addigy securely handle certain user-level operations on macOS devices — such as granting Secure Token during account creation — without prompting the end user for admin credentials. Verifying that a device's Bootstrap Token was properly escrowed to Addigy confirms this will work as expected.
For background on what the Bootstrap Token is and which devices support it, see What is macOS Bootstrap Token.
How to Verify Bootstrap Token Status
Run the following command on the macOS device:
sudo profiles status -type bootstraptoken
If the Bootstrap Token is enabled and escrowed properly, you'll see:
profiles: Bootstrap Token supported on server: YES profiles: Bootstrap Token escrowed to server: YES
If the Server Shows "Supported: NO"
If the command doesn't return YES for server support, the MDM profile needs to be redeployed:
- Log in to Addigy and navigate to the Devices page.
- Find the device and click +MDM to reinstall the MDM profile.
Note: Some macOS versions require a reboot before the status flips from NO to YES after the MDM profile is redeployed.
Escrowing the Bootstrap Token to Addigy
Once the device shows YES for server support, the token is escrowed automatically the next time someone logs in to the device.
- Have the end user log out and back in to the device.
- Addigy will receive the Bootstrap Token from the device, flipping the escrow status from NO to YES.
- Confirm this by re-running the
profiles status -type bootstraptokencommand above.