Token removal option doesn't work on macOS 10.12

Originator:richard
Number:rdar://30284674 Date Originated:31st January 2017
Status:Duplicate Resolved:
Product: Product Version:
Classification: Reproducible:Yes
 
31-Jan-2017 03:00 PM

Area:
Screen Saver & desktop

Summary:
When using legacy smart card authentication on macOS 10.12, you can set an option in Security & Privacy to activate the screensaver when the card token is removed.

This, when set with a configuration profile on 10.11 works perfectly. The same profile on 10.12 fails to work.

I only have legacy TokenD drivers for the card so cannot test if this is a legacy only issue or present with CTK drivers as well.

Steps to Reproduce:
Install a legacy TokenD card driver on 10.12.x
Set a configuration profile for "com.apple.screensaver" for "tokenRemovalAction" to "1".
Log in with a smart card.
Remove the card from the reader.

Expected Results:
Screen should lock and the screensaver should activate.

Actual Results:
Nothing happens.

Version:
10.12.x

Notes:


Configuration:


Attachments:

Comments

Marked as a duplicate of 30212371

By richard at Feb. 14, 2017, 9:14 a.m. (reply...)

Apple so far has asked for the configuration profile I use for the setting. You can see the tick box being set, but no effect.

By richard at Feb. 5, 2017, 3:24 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!