Setting the Recovery Lock or Displaying its Status

About this task

The recovery lock feature enables you to restrict user access to the recovery partition on macOS devices. This restriction prevents unauthorized access to the recovery partition, protecting sensitive data, preventing unauthorized changes, and aiding compliance with regulatory requirements.

Note: Requires macOS 11.5 or later.
Important: This procedure applies to Apple silicon-based macOS devices only.

Displaying the Recovery Lock Status

About this task

To display the recovery lock status on an Apple silicon-based macOS device:

Procedure

  1. From the main menu, select Devices. The Devices view opens.
  2. In the left pane, select the device group with the macOS device for which you want to view the recovery lock status. The devices in the selected group appear in the right pane.
  3. In the right pane, select the name of the macOS device. The device information panel opens.
  4. In Device Details, scroll to the Security section. The recovery lock status is either Configured or Not Configured.
    Recovery lock status

Setting the Recovery Lock

About this task

To set the recovery lock on an Apple silicon-based macOS device:

Procedure

  1. From the main menu, select Devices. The Devices view opens.
  2. In the left pane, select the device group with the macOS device you want to set the recovery lock for. The devices in the selected group appear in the right pane.
  3. In the right pane, select the name of the macOS device. The device information panel opens.
  4. On the device action bar or the device information panel, select the More button to open the Device Actions menu.
  5. On the Device Actions menu, select Set Recovery Lock. The Set Recovery Lock dialog box opens.
    Set Recovery Lock dialog
  6. In the Set Recovery Lock dialog box, enter the current recovery lock password (if set on the device), the new password, and the new password confirmation.
  7. Optional: Select Request Requires Network Tether to require the device to be network-tethered to run the command.
  8. Select Set Recovery Lock.

Results

You have set the recovery lock on the macOS device.