Clearing the macOS Activation Lock

You can remotely clear the activation lock on macOS devices.

About the macOS Activation Lock

Activation Lock is a security feature that is designed by Apple to prevent unauthorized access to devices that are lost or stolen. When users activate Find My Mac on their device, Activation Lock is automatically turned on. To erase or reactivate the device, the Apple ID and password of the user is required.

An activation window is displayed after factory reset when an employee departs from an organization and returns a device without disabling Activation Lock. Administrators can bypass Activation Lock remotely without relying on the former employee's Apple ID before assigning the device to a new employee for reuse.

Prerequisites
  • The Mac must be supervised.
  • Enable Find My Mac after you enroll the device.
  • Upgrade to macOS Catalina or later.
  • The Mac must have the Apple T2 Security Chip.
Note: MaaS360® can only control Activation Lock on macOS devices that are added to your Apple Business Manager portal. DEP enrolled devices are automatically eligible for Activation Lock removal. If Activation Lock was enabled before device enrollment, MaaS360 cannot clear it. For removal of Activation Lock on devices no longer enrolled in MaaS360, contact Apple Support.

Clearing the macOS Activation Lock with a remote command

Follow these steps to clear the macOS Activation Lock with a remote command:

  1. Go to Devices > Inventory and then select the macOS device that you want to clear Activation Lock for. The Device Summary page is displayed.
  2. Click More and then select Clear Activation Lock.
  3. Click Continue.

Clearing the macOS Activation Lock with a bypass code

Follow these steps to use a bypass code to clear the macOS Activation Lock after a device is unenrolled from MaaS360.

  1. Go to Devices > Inventory and then select the macOS device that you want to clear Activation Lock for.
  2. On the Device Summary page, click More and then select Clear Activation Lock. The Activation Lock bypass code is displayed.
  3. On a factory reset device, click Recovery Assistant > Activate with MDM Key. Enter the bypass code and then click Next.

Viewing the Clear Activation Lock status

After issuing the Clear Activation Lock command, you can track the status of the command in the device history.

Follow these steps to view the status of the Clear Activation Lock command:
  1. Go to Devices > Inventory and then select a macOS device. The Device Summary page is displayed.
  2. Select Summary > History. The details are provided under the Comments column.
    The Device not found is displayed in the following cases:
    • Find My Mac is not enabled.
    • Activation Lock is already cleared.