Questions about MDM command "DeviceLock"

Hi, I have a couple of questions about how to proceed and prepare the implementation for the DeviceLock MDM command for macOS in a secure and proper manner.

https://developer.apple.com/documentation/devicemanagement/device-lock-command

  1. In documentation "PIN" is "(string) The six-character PIN for Find My. This value is available in macOS 10.8 and later." - is this the PIN that is used to unlock the device?

  2. Is there any video online that I can see how the process would look like for the end user with locking and unlocking a device?

  3. What should be done before sending a DeviceLock command? What should be done to safely test the command without bricking a device.

  4. How to unlock a device that was locked with a DeviceLock command? Is there any Unlock command or can the user unlock device with the provided PIN earlier?

Thank you for any help!

Questions about MDM command "DeviceLock"
 
 
Q