Create a Mac System Unlock Control Policy

This policy manages the additional features a user has available to unlock their system, such as using their fingerprints or utilizing an auto-unlock function. This policy works on all JumpCloud-supported macOS devices.

Users on managed machines will only be able to access the System Unlock features allowed by an administrator. 

To create a System Unlock Control policy for Mac:

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Mac tab.
5. Select the System Unlock Control policy from the list, then click configure.
6. In the Policy Name field, enter a name for this policy.
7. (Optional) In the Policy Notes field, enter information you want to retain for this policy.
8. Under Settings, select Allow Fingerprint Unlock to enable users to unlock their device using Touch ID.

Note: When the fingerprint unlock function is enabled (or re-enabled after being disabled), users must enroll their fingerprints with Touch ID.

8. Select Allow Apple Watch Auto Unlock to enable Mac’s Auto Unlock feature.
9. (Optional) Select the Device Groups tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
10. (Optional) Select the Devices tab. Select one or more devices where you’ll apply this policy.
11. Click save.
12. For the policy to take effect, log out and then log back in to the JumpCloud Admin Portal.