--credentials and very insecure mode

[kbreed27]

The management at my place of work is keen to implement using silent updates on our Macs. MDM commands are so unreliable. If we use the insecure mode of the erase/install script and pass the base 64 encoded credentials through Jamf "files and processes" payload, is there anywhere on the local machine those creds are stored in a log?

Or is it just accessible inside JAMF?

[grahampugh]

Not that I am aware of, but I am not taking responsibility for your decision :-) So I advise you to test thoroughly. I do not recommend the use of the insecure mode for single-user computers, that's why I enforced the flag "--very-insecure-mode" to make you think twice and test thoroughly.

[sniper8952]

@grahampugh Could you please make an example with --very-insecure-mode in the instructions?

I tried it this way with Jamf Pro but it didn't work:
/Library/Management/erase-install/erase-install.sh --version 14.4.1 --erase printf "%s:%s" "admin-rental" "Password" | iconv -t ISO-8859-1 | base64 -i - --credentials ENCODEDCREDENTIALS --very-insecure-mode --no-fs --check-power --confirm -test-run

Thank you