Iru Adds macOS LAPS for Automated Local Admin Password Management
Summary
Iru introduced a macOS LAPS feature for managed Macs that generates and rotates local administrator passwords, securely escrows them, controls retrieval, and records access and configuration events.
Key points
- The feature lets administrators manage passwords for one or more local administrator accounts across managed Macs.
- Organizations can set password requirements and scheduled rotation, with rotation also queued after an authorized retrieval.
- Passwords are escrowed securely, and role-based access limits who can retrieve them.
- Iru’s agent performs rotations on the device using native Open Directory APIs and verifies and reports the outcome.
- Access, rotations, and configuration changes are recorded in an audit history.
- macOS LAPS is available only in Iru tenants; users must upgrade from Kandji to Iru before deployment.
Article Details
- Event Type
- Iru introduced macOS Local Administrator Password Solution (LAPS), a Library Item for managing local administrator passwords on managed Macs.
- Impact
- The feature is designed to provide unique credentials per Mac, automate password rotation, securely escrow passwords, restrict retrieval to authorized users, and audit access. Iru says this can reduce standing privilege and shared-secret exposure; the article reports no measured impact.
People
Vendors
Products
Iru AgentThe Iru Agent ensures the newly set password works on the device and is successfully escrowed to Iru.macOSToday, we’re introducing macOS Local Administrator Password Solution (LAPS) in Iru: a new Library Item that helps teams automatically generate, rotate, securely escrow, and control access to local administratormacOS LAPSThe macOS LAPS Library Item gives administrators a central place to define how local administrator credentials should be managed.