On Mar 22, 2016, at 6:47 PM, Shawn Geddis <geddis@icloud.com> wrote:

On Mar 22, 2016, at 6:09 PM, Lance Terada, CTR <lance.terada.ctr@mhpcc.hpc.mil> wrote:

Hello,
Does anyone know how to configure activating the screensaver after pulling your token out of the CAC reader?

Lance,

If you already have enabled use of smartcards for login, you can simply click on on the “Advanced…” tab at the lower right-hand corner.

System Preferences -> Security & Privacy ->  Advanced…

<Screen Shot 2016-03-22 at 6.32.51 PM.png>

This could be scripted with the following commands (Replace <username> with the actual account name):

(This ends up being the easiest syntax for many)

sudo /usr/libexec/plistbuddy -c "Add:tokenRemovalAction integer 1" /Users/<username>/Library/Preferences/com.apple.screensaver.plist
sudo /usr/libexec/plistbuddy -c "Add:askForPassword integer 1" /Users/<username>/Library/Preferences/com.apple.screensaver.plist
sudo /usr/libexec/plistbuddy -c "Add:askForPasswordDelay integer 0" /Users/<username>/Library/Preferences/com.apple.screensaver.plist

You can also READ what the settings are using ‘defaults':

$ sudo defaults read  /Users/<username>/Library/Preferences/com.apple.screensaver

Which would give you the following:

{

    askForPassword = 1;

    askForPasswordDelay = 0;

    tokenRemovalAction = 1;

}

- Shawn

_____________________________________________________________________
Shawn Geddis            geddis@{Mac | Me | iCloud}.com
Security and Certifications Engineer, Apple                geddis@apple.com

Smart Card Services  Project/Dev Lead:                                                                                 
Project Wiki:           [SmartCardServices.MacOSFforge.Org]
Mailing Lists:          [Lists.MacOSForge.Org/mailman/listinfo]

SCS Contact:            [scs-cotact@macosforge.org]

SCS Admin:            [scs-admin@macosforge.org]

_____________________________________________________________________