Fleet logo
Menu An icon indicating that interacting with this button will open the navigation menu.
Fleet logo An 'X' icon indicating that this can be interacted with to close the navigation menu.
Solutions A small chevron
Device management

Device management

Remotely manage, and protect laptops and mobile devices.

Orchestration

Orchestration

Automate tasks across devices, from app installs to scripts.

Software management

Software management

Inventory, patch, and manage installed software.

Extend Fleet

Extend Fleet

Integrate your favorite tools with Fleet.

Customers A small chevron
Stripe + Fleet

Stripe + Fleet

Stripe consolidates multiple tools with Fleet.

Foursquare + Fleet

Foursquare + Fleet

Foursquare quickly migrates to Fleet for device management.

What people are saying

What people are saying

Stories from the Fleet community.

Pricing
More A small chevron
Try it yourself Get a demo
Secure keyboard entry for Terminal application enabled

Secure keyboard entry for Terminal application enabled

Checks that a mobile device management (MDM) solution configures the Mac to enabled secure keyboard entry for the Terminal application.

Control

Create or edit a configuration profile with the following information:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>SecureKeyboardEntry</key>
      <true/>
      <key>PayloadDisplayName</key>
      <string>Terminal</string>
      <key>PayloadIdentifier</key>
      <string>com.apple.Terminal.89C5FA0F-CA32-4CC7-99D9-931B13CB923B</string>
      <key>PayloadType</key>
      <string>com.apple.Terminal</string>
      <key>PayloadUUID</key>
      <string>89C5FA0F-CA32-4CC7-99D9-931B13CB923B</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
    </dict>
  </array>
  <key>PayloadDisplayName</key>
  <string>Enable Terminal Secure Keyboard Entry</string>
  <key>PayloadIdentifier</key>
  <string>com.fleetdm.enableterminalsecurekeyboardentry.6E73E3DF-0D0A-4B17-BBCB-3E0906C78743</string>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadUUID</key>
  <string>6E73E3DF-0D0A-4B17-BBCB-3E0906C78743</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
</dict>
</plist>

Create or edit the following script and configure it to run when the check fails:

Check

Use the policy below to verify:

SELECT 1 FROM managed_policies WHERE domain = 'com.apple.Terminal' AND name = 'SecureKeyboardEntry' AND value = 1 LIMIT 1;
[ "$(defaults read "/Library/Managed Preferences/com.apple.Terminal" SecureKeyboardEntry 2>/dev/null)" = "1" ] && echo 1 || echo 0
An icon indicating that this section has important information

PowerShell commands are currently work in progress, contributions welcome.

An icon indicating that this section has important information

Bash commands are currently work in progress, contributions welcome.

Platform

macOSmacOS/apple

WindowsWindows

LinuxLinux

ChromeOSChromeOS

Docs REST API Guides A pencil iconEdit page