Casper Suite Administrator's Guide v8.7 - JAMF Software

Managing Open Firmware/EFI Passwords
You can manage Open Firmware or EFI passwords remotely to ensure the security of client computers.
This section explains how to set and remove an Open Firmware/EFI password using a policy or Casper
Remote.
Important: If you are setting or removing an Open Firmware/EFI password on models "Late 2010" or
later, the "setregproptool" must be present on the volume(s) used to set firmware. For instructions on
obtaining and placing the "setregproptool" binary, see the following Knowledge Base article:
https://jamfnation.jamfsoftware.com/article.html?id=58
To set or remove an Open Firmware/EFI password using a policy:
1. Log in to the JSS with a web browser.
2. Click the Management tab.
3. Click the Policies link.
4. Create or edit the policy.
• To create a policy, click the Create Policy button in the toolbar, select the Create policy manually
option, and then click Continue.
To edit an existing policy, click the Edit Policy link across from it.
•
5. Enter a display name for the policy.
6. Assign the policy to a category using the Category pop-up menu.
7. Choose a trigger from the Triggered By pop-up menu.
8. Choose how often you want clients to run the policy using the Execution Frequency pop-up menu.
9. Click the Scope tab and assign computers or user groups to the scope.
10. Click the Accounts tab and select the Set Open Firmware/EFI Password checkbox.
357