Activation Lock Overview

Activation Lock is a security feature for devices running macOS 10.15 and higher that uses Apple's Find My functionality. This feature is used to protect the device by being stolen or used by anunauthorized persons. Apple Business Manager allows the organization to control all the managed devices to enable or disable the Activation Lock on the devices by using a bypass code and the user need not login through the Apple ID.

Enable Activation Lock for a macOS Device

For supervised macOS devices running macOS 10.15 and later, you can configure Activation Lock and force it to be enabled. The Omnissa Workspace ONE UEM server will interact with Apple to enable the Activation Lock on a particular device.

1.Navigate to Device Details View > More Actions > Enable Activation Lock

2.Select Save.

Enable Activation Lock for Bulk Devices

You can enable Activation Lock on all supervised macOS devices that are managed by your organization. To do so,

1.Navigate to Settings > Device and Users > Apple > Activation Lock

2.Click Enable and select the Smart Groups and Save.

View Activation Lock Status

For both unsupervised and supervised devices running macOS 10.15 and later, you can view whether Activation Lock is enabled on the device.

1. Navigate to Devices List View.
2. Select a macOS device.
3. Check the Summary tab under the Security section. You can see whether Activation Lock is enabled or disabled.

How to Bypass Activation Lock on macOS Devices

For supervised and enrolled macOS devices managed by Omnissa Workspace ONE UEM, you can bypass the Activation Lock using one of the three methods.

1. Clear the Activation Lock in Workspace ONE UEM console.
2. Enter an Activation Lock Bypass Code directly onto the device.
3. Perform a Device Wipe command and select an option to clear the Activation Lock.

Clear the Activation Lock in the UEM Console

In the console, by using the Disable Activation Lock command, you can clear the Activation Lock on a device without performing a device wipe. This command is useful if you know the whereabouts of the device and do not want to wipe its contents completely to clear the lock.

1. Navigate to Device Details View > More Actions . More Actions drop-down menu displays a list of available tasks.
2. Select Disable Activation Lock.

Enter an Activation Lock Bypass Code

An Activation Lock Bypass Code is useful if the device is unenrolled from Omnissa Workspace ONE UEM MDM and there are no options to perform a Clear Activation Lock or device wipe.

1. Navigate to Device Details View > More Actions .More Actions drop-down menu to displays a list of available remote commands.
2. Select Disable Activation Lock. Workspace ONE UEM displays the bypass code.

3. On your macOS device,enter this bypass code as the Activation Lock’s password. Leave the Apple ID and username field empty.
4. Select Deactivate.

Perform a Device Wipe command and select an option to clear the Activation Lock.

When you perform a Device Wipe on a macOS device, Omnissa Workspace ONE UEM allows you the option to disable Activation Lock as part of the process. Select Disable Activation Lock when prompted.