How to install mac login


Step

Pre-registration of data for Mac
[Administrator operation] Use the kitting batch registration function to pre-register the data necessary for logging in Mac.
Software Download
[Administrator operation] Download the software from the management console and deploy the installer to each PC.
Software Installations
[Administrator or General User Operation] Run the installer to install the software.
Client Tool Setup
[Administrator or General User Operation] Launch the client tool and perform setup. After the setup is completed, the next time you log in, you will be able to log in using your YubiKey.
Reflecting Group Policies
[Administrator operation] From the Service Settings screen of the Management Console, configure a group policy for device control and apply the rules.

Pre-Installation settings

Mac Login Service has the ability to log location information.
To enable this feature, please make sure that the following location services are enabled.

1. System Settings > Privacy and Security > Privacy > Location Services
　Make sure “Location Services” toggle button is turned on.


If “Location Services” toggle button is turned on, please proceed to the installation procedure.
If “Location Services” toggle button is turned off, please do the following

2. Click the toggle button for “Location Services”.
If a privacy and security prompt appears, enter your “Username” and “Password”.
Then click the “Modify Settings” button.
3. Click on the “key” icon, then click on the “Close” button in the upper left corner.

This is all that is required before installation.


Install

  1. Insert the YubiKey into the USB port.
    Be sure to insert YubiKey because it is included to detect and work with YubiKey at the completion of installation.

  2. Run the downloaded installer.

    If the message “YubiOnPortalClient.pkg” is an application downloaded from the Internet. Are you sure you want to open it?” is displayed, click “Open”.

If it does not open, click “YubiOnPortalClient.pkg” while holding down the Control button and click “Open”.

  1. Click “Continue.”

  2. Read “Important Information” and click “Continue.”

  3. Read the “Software License Agreement” and click “Continue”.

  4. Click “Agree.”

  5. Click “Continue.”

  6. Click “Install”

  7. Administrative privileges on the macOS device are required.
    Enter your “User Name” and “Password” and click “Install Software”.

  8. If the installer asks for computer management permissions, click “Allow.”
    After the installation is complete, several pop-ups will appear in addition to the installation complete screen.

  9. Click “Close.”

If the message “Do you want to put the “YubiOn Portal Client” installer in the Trash?” If the message “Do you want to put the installer of “YubiOn Portal Client” in the Trash?


Location and Notification settings

  1. Click “OK” when a pop-up window appears to allow the use of location information.

  2. Open System Settings > Privacy and Security > Privacy > Location Services.
    If the toggle button for “PortalPreloginAgent” is turned on, the configuration is complete.

    If you do not see the above pop-up, such as during reinstallation, turn on “PortalPreloginAgent” after reboot.

  3. Click “Allow” when the notification permission pop-up appears.

  4. Open System Settings > Notifications > PortalPreloginAgent and if it is set as follows, you are done.

    • Allow notification” is enabled.
    • “Show previews” is set to “Always”.

    If you do not see the above pop-up, for example when reinstalling, please go to System Settings > Notifications and configure your settings.


Privacy and Security settings

Privacy and Security settings are required for each operating system to use the Mac login service.
Please see below for information on Privacy and Security settings.


Privacy and Security setting items

The following settings are required for Privacy and Security

  • Location services
    Already set up in Location and Notification settings.
  • Input monitoring
    Added “DeviceLocker” and “YubiOnPortalLoginHelper.
  • Full disk access
    Added “PortalPreloginAgent” and “YubiOnPortalLoginHelper”.

A confirmation pop-up for the keystroke will appear.

  1. If it does not appear, open the System Settings screen and continue with the settings.
    “DeviceLocker” will be added to the input monitoring.

    If you do not see the above pop-up, such as during reinstallation, go to System Settings > Privacy and Security > Input Monitoring.


Input monitoring settings

  1. Click on “Input Monitoring,” then click on “+.”

  2. Administrator privileges are required, so enter your “username” and “password,” then click “Unlock”.

  3. Select “Macintosh HD.”

  4. Click on Library > PrivilegedHelperTools > YubiOnPortalLoginHelper and click “Open”.

    If you are using macOS Tahoe version 26.1 or 26.2, we have confirmed an issue where the added “YubiOnPortalLoginHelper” does not appear in the list, despite the configuration itself completing successfully, due to a macOS bug.
    This is a display-only issue. If you follow the steps to add “YubiOnPortalLoginHelper” and perform the additional operations as instructed, the application will function correctly.
    Please note that this issue does not occur in versions 26.0, 26.0.1, or 26.3 and later.

  5. Turn on the “DeviceLocker” toggle button.
    If “DeviceLocker” is not listed, click the “+” button and add “DeviceLocker” from “Applications”.
    When a confirmation message is displayed, click “Later.”


Full disk access settings

  1. Click on “Full Disk Access.”

  2. Turn on the “YubiOnPortalLoginHelper” toggle button.

  3. Turn on the “PortalPreloginAgent” toggle button.

  4. When a confirmation message appears, click “Later.”

  5. If “YubiOnPortalLoginHelper” and “PortalPreloginAgent” are not in the table, click the “+” button and add them from the following location.
    Select “Macintosh HD

  6. Click on Library > PrivilegedHelperTools > YubiOnPortalLoginHelper and click “Open”.

    If you are using macOS Tahoe version 26.1 or 26.2, we have confirmed an issue where the added “YubiOnPortalLoginHelper” does not appear in the list, despite the configuration itself completing successfully, due to a macOS bug.
    This is a display-only issue. If you follow the steps to add “YubiOnPortalLoginHelper” and perform the additional operations as instructed, the application will function correctly.
    Please note that this issue does not occur in versions 26.0, 26.0.1, or 26.3 and later.

  7. After setting the above, check the “Do not show again” checkbox and click the “Close” button.


Reflection of settings

  1. Click on the “Close” button in the upper left corner.

  2. Restart the terminal.

    The settings will not be reflected unless the system is rebooted.Be sure to reboot.
    When rebooting, it works fine even if YubiKey is plugged into the device.

    After rebooting, please log in to the terminal.
    *Setting is not complete at this stage. To set up login using YubiKey, you need to configure the client tool.

That’s it for the Mac login installation.
To enable two-factor authentication for a device, you will need to operate the configuration tool.