Skip to content

Conversation

@jessepeterson
Copy link
Member

Add ability to Activation Lock a device using the DEP API. Add utilities for generating Activation Lock Bypass Codes.

  • New API endpoint /v1/bypasscode which can generate new (and parse existing) Activation Lock Bypass Codes and return their various forms.
  • New godep package support for Activation Lock with the godep.Client.ActivationLock() method.
  • New helper script: ./tools/dep-activation-lock.sh which can send Activation Lock requests to the DEP API via the depserver proxy.
  • New standalone helper binary bypasscode which can generate new (and parse existing) Activation Lock Bypass Codes and return their various forms—much like the endpoint above.

More details provided in the included documentation in the Operations Guide and OpenAPI spec (once merged). See also Creating and Using Bypass Codes.

Thanks to Victor Vrantchen for the initial Go port of Apple's Activation Lock Bypass Code examples from MicroMDM.

Also note this bumps our required Go version to 1.24 for the use of the standard library PBKDF2.

Copy link

@natewalck natewalck left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shipit

@jessepeterson jessepeterson merged commit a0f524a into micromdm:main Oct 7, 2025
10 checks passed
@jessepeterson jessepeterson deleted the activation-lock branch October 7, 2025 04:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants