Unable to Enable _automoxserviceaccount SecureToken via Automox

Question

Hi, After following this documentation, as well as enabling and configuring the “Enable Apple Silicon Patching” worklet (with the correct admin credentials) I have been unsuccessful in my attempts to remediate the `_automoxserviceaccount` SecureToken authorization.First I tried sudo /usr/local/bin/amagent --adminuser '' --adminpass '' but received: ENABLE Automox service account given account not found I tried this remotely (via mdm) and locally, same result. I confirmed that _automoxserviceaccount exists at /Local/Users/_automoxserviceaccount The admin user has SecureToken enabled Then I tried the supplied automox worklet “Enable Apple Silicon Patching” I supplied the same valid as variables in the worklet: SECURE_TOKEN_ACCOUNT="_automoxserviceaccount" SECURE_TOKEN_ADMIN_USER="" SECURE_TOKEN_ADMIN_PASSWORD="" This did not use the supplied creds and instead prompted the logged in user to enter their password. Upon entering the password on the device, it enabled Secure Token I’m trying to avoid prompting end users for credentials. Am I missing something? Thank you.

AX-JaredHines · Answer

Hey ​@ddb!So first would try removing the Automox Service Account entirely using this command.sudo dscl . -delete /Users/_automoxserviceaccountThen try the process of passing it again.Something to note is that if you have any MDM rules that rotate passwords this would interfere with the Service Account and break the password. You would need to exclude the account from rotating.For the Worklet I would review the readme text in the to ensure its been configured properly. If the variables are input incorrectly or fail it will attempt to use the currently logged in user to grant the secure token causing the prompt to the end user.Hopefully that helps! If notI would recommend submitting a support ticket so we can triage further.Have a great day!

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded