Jamf Pro Computer Extension Attribute for status of firmware password check

firmwarepasswd-check.sh

#!/bin/bash
# 
# Created by jps3@lehigh.edu on 2021-08-22
#
# Jamf Pro > Settings > Computer Management > Extension Attributes
# Display Name      : firmwarepasswd-check
# Description       : Report result of firmware password check.
# Data Type         : String
# Inventory Display : Hardware
# Input Type        : Script
# 

# 
# This is only valid for Intel-based EFI Macs.
# Returns error message to stderr, usage to stdout, and exits non-zero (5) on Apple Silicon
# 

RESULT="$(/usr/sbin/firmwarepasswd -check | awk -F ": " '$1=="Password Enabled" { print $2 }')"

if [[ -n "$RESULT" ]]; then
	echo "<result>${RESULT}</result>";
fi

exit 0

• sysctl hw.optional.x86_64 is set to 1 for Intel (nothing returned if not set)
• sysctl hw.optional.arm64 is set to 1 for Apple Silicon (nothing returned if not set)