Secure Token Access - Overview
Secure token access is a part of Mac's encryption technology called FileVault. Secure token privilege is like an invisible/secret form of a key encryption key (KEK) secured by a user's password. The ability to allow cryptographic processes such as decrypting and unlocking the FileVault disk is an account attribute. This privilege will be automatically granted to the account created first and new. In addition, a secure token will be granted during
- The first login
- Setting up the first user's password
Whenever your computer reboots, the login screen may be accessed by a user with secure token access. To put it differently, if you are capable of accessing and signing in to the system with your user password, this means that you have an authenticated token access right now. Otherwise, to prevent access you will not even see a user account on the login screen. Therefore, the system cannot be unlocked.
This privilege applies to both admins and standard users. Standard users with secure token access can do the above-mentioned action only (like decrypting FileVault screen).
An admin with this privilege is entitled to
- Grant it to other users who don't have it and can also revoke it. Using a specific command tool named sysadminctl, you can grant, revoke and check the other accounts' status of secure token privilege.
- Change the passwords of other users
To this end, you're setting up a dedicated Zoho One service account and looking for secure token access. You will be able to do the above actions when a user who already owns this account has transferred it into that account. A password prompt appears while you are installing the ZD agent. Here we'll enter the authentication credentials of a user with secure token access enabled. This will extend the secure token access.
Now that you have added secure token access to your account, the credentials related to this are stored in one of the databases. These credentials allow you to reset other users' passwords, as well as update any password that is out of sync.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Overview
Overview Encryption is used to secure data by replacing plain text with ciphered text, so that only the intended recipient can understand its contents. Any form of data is initially encrypted at rest using Data Encryption Keys (DEK). The DEKs are ...Request access to an app in Zoho Directory - Overview
Users are not permitted by default to add or access an app. They require permission from the admin. Once a user sends a request to the admin to add a new app or access to an existing app, the admin gets notified of the request. Then the admin ...Device Authentication - Overview
Zoho Directory provides single sign-on for all cloud applications, but employees need to log in to their devices with a different set of credentials. Enabling Device Authentication lets you enroll and manage all your workspace devices like Mac, ...Upload Key
Overview Bring Your Own Key (BYOK) is a feature that allows you to use your own key encryption key(KEK) instead of Zoho's KEK. You can add a key either from an External Key Manager (EKM) of your choice or upload an encrypted key manually. If you ...Pending actions - Overview
If an enrolled device is either unreachable or remains offline, none of the above actions will be completed. A message indicating that some pending actions exist is displayed with the account name. The pending actions are scheduled to be completed ...
New to Zoho LandingPage?
Zoho LandingPage Resources