View Source

All izzy-manged macs have an admin account: “UM-Support”. This account is designed to be primarily used:

During pre-delivery phases, for verifying the build or restoring user data.
- Logging in as UM-Support will enable FileVault when appropriate, based on the policy domain in Izzy.
For other “administrative” tasks when other administrative accounts are not available.

The password for the UM-Support account is visible in Izzy under the “Support Account Details” action on each system’s Izzy page.

Once viewed, the password will be rotated in a few hours.

Izzy Documentation > Izzy-Managed Support Accounts > image-20190814-161116.png

Additionally, a second account, “UM FileVault Mgmt” will show up on FileVault-managed systems. This account is only local to the Mac. It is used to add new users to the FileVault-enabled users. The password is only stored on the Mac.

Izzy Documentation > Izzy-Managed Support Accounts > image-20190814-161049.png

Please advise users not to delete either of these accounts. If they do the account(s) will be restored at next login.

NOTE: Macs that are deployed as “At Home” builds will not show “UM Support” at the FileVault unlock screen until the account is actually logged into at the Login Window.