Centrify Endpoint Services
Centrify DirectControl Agent for Mac
We would like to call your attention to an important announcement regarding macOS High Sierra upgrade and Centrify DirectControl Agent for Mac.
As highlighted on our High Sierra Support page, there are significant concerns related to Macs updating to High Sierra without the latest Centrify agent (5.4.2) installed. Our recent tests have revealed that login failures can affect both network accounts and local admin accounts. This means that if a Mac is upgraded to High Sierra with a previous version of the Centrify agent, all authentication will be blocked, and you will need to boot into recovery mode to restore login. If you are experiencing this issue, please refer to this Knowledge Base Article to guide through the steps needed to restore authentication.
We strongly recommend blocking macOS High Sierra upgrades until systems have been updated with the latest Centrify agent.
We recommend using our group policies to block the installation of the High Sierra upgrade. If you have used our Group Policy to block the execution of the High Sierra install, please note that this method only takes effect after the end-user has logged out and logged back in. We have updated our Knowledge Base article on this topic with new instructions that will enable the policy to take effect without the need for the user to logout.
We have also identified an issue related to deploying FileVault on 10.13 systems using institutional keys (rather than individual keys). We are actively investigating this issue, and we will post additional updates in this Tech Alert post. Please contact Centrify Technical Support if you are currently experiencing this issue.
Please do not hesitate to reach out to our support team if you require further assistance.