Skip to main content
This guide applies to macOS, iOS, iPadOS, visionOS, and Android devices

​
About Device Lock

The Lock Device command is available on macOS, iOS, iPadOS, visionOS, and Android. It doesn’t require supervision.
A locked device can’t receive an Erase Device MDM command. For more information on erasing a device, see our Erase a Device support article.

​
How It Works

When you lock a device, Iru Endpoint sends an MDM command to the device to immediately secure it. The device will require a passcode to unlock, and you can optionally display a custom message on the lock screen.
  • macOS
  • iOS/iPadOS
  • visionOS
  • Android (Company-Owned Work Profile)

​
How to Lock a Mac

1

Navigate to Device Record

Navigate to the Device Record.
2

Open Device Action Menu

Open the Device Action Menu.
3

Select Lock Device

Select Lock Device.
4

Configure Lock Message

Optionally, configure a Lock message (macOS 14 or higher).
5

Lock Device

Click Lock device.

​
Command Behavior

  • macOS
  • iOS/iPadOS/visionOS
  • Android (Company-Owned Work Profile)

​
Command Behavior for macOS

For macOS devices, the device will be locked with an EFI/Find My PIN code. Some conditionals, whose behavior is unique to the hardware and macOS version, are outlined below. Once the device receives the command, a 6-digit pin will automatically be generated and available on the device record.Mac computers with Apple silicon running macOS 11.5 or earlier.
  • Lock device PINs aren’t supported on Mac computers with Apple silicon before macOS 11.5
  • The device will restart to recoveryOS, where an admin must authenticate, and activation will be required
Mac computers with Apple silicon running macOS 11.5 or later.
  • The device will restart and be locked with a randomly generated PIN once the device receives the command
Mac computers with Intel running any supported macOS version.
  • The device will restart and be locked with a randomly generated PIN once the device receives the command