csrutil: Failed to authenticate

Question

Created Mar ’21

Replies 4

Boosts 0

Views 6.4k

Participants 5

Hello. When I try disabling System Integrity Protection (SIP) in the Recovery mode via the "csrutil disable" command, I am prompted to enter my credentials. Even when I enter correct username / password, I get the following error:

csrutil: failed to set credential: Error Domain=com.apple.LocalAuthentication Code=-1 "Password rejected (3)" UserInfo={NSLocalizedDescription=Password rejected (3), NSUnderlyingError=0x15be0bb10 {Error Domain-com.apple.LocalAuthentication Code=-1 "User not found" UserInfo={NSLocalizedDescription=User not found}}} (additional failure: Error Domain=com.apple.LocalAuthentication Code=-1004 "User interaction is required." UserInfo={BiometryType=1, NSLocalizedDescription=User interaction is required., AvailableMechanisms=(
2
)})
csrutil: Failed to authenticate.

If I enter a random non-existing username I get a different error so I am sure I entered the correct username. My user is managed by my company, having the admin privileges showing "Admin, Mobile" in the Users & Groups screen. I tried creating a new user with "Admin" only, but got the same error message. Is it possible there is some misconfiguration done by our IT department? Thank you.

Boost

Answer 1

CVN72 OP

May ’21

I have the same issue on my new Mac mini M1. But in my case, I can't change the username.

0

Answer 2

idomazine OP

Aug ’21

I have the same problem when I downgraded my MacBook Air (M1) from Monterey beta (developer beta 4) to Big Sur. After re-installing Big Sur I've recovered an admin account from Time Machine Backup. And it is unsolved yet. I guess the user integrity is corrupted on recovery mode from the message "User not found".

0

Answer 3

milhauscz OP

Aug ’21

We found out M1 Macs require the user to have a "secure token". Although a user is an admin account, it doesn't necessarily have the secure token, e. g. if created using command line tools. The token can be assigned in Terminal by another user who has admin privileges and secure token as follows:

sysadminctl -secureTokenOn username_which_needs_secure_token_goes_here -password password_goes_here

0

Answer 4

provatascharlton OP

Nov ’21

Disabling Touch ID in system preferences fixed the issue for me.

0