Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Startup Security Utility - No administrator was found.

I have a new 2018 MacBook Pro and am unable to change settings in the Startup Security Utility because it claims there's no administrator (there is, the one I made at first boot). I've tried a PRAM reset..not many other suggestions out there about this issue.

MacBook Pro with Retina display, macOS High Sierra (10.13.6)

Posted on Aug 22, 2018 2:31 PM

Reply
Question marked as Best reply

Posted on Oct 5, 2018 6:55 AM

I am having a similar issue - here is the description why it happened to me. I called the Apple support and they explained to me, that my issue is probably not solveable so may the following be a warning for you, dear reader, what you should NOT do: Migrate your old MacBook Pro to a new MacBook Pro with T2 chip using Carbon Copy Cloner, instead of Apple's built-in migration assistant.


Here is what I did that lead to the catastrophy:


  1. Unpacked my brand new MacBook Pro and booted it once to have a "temporary admin".
  2. Used the Startup Security Utility (used the password of this temporary admin) to allow booting from an external HD
  3. Upgraded my old MacBook Pro to Mojave and used Carbon Copy Cloner to make a clone of the HD
  4. Booted the cloned HD on my New MacBook Pro (which worked like a charm because I allowed this inside Startup Security Utility)
  5. Used Carbon Copy Cloner (CCC) to clone the external boot HD to the internal MacBook's HD
  6. Removed the external HD
  7. Rebooted my new MacBook
  8. WORKED LIKE A CHARM: The new MacBook "feels" like the old one, my old admin user is there, all my apps are there, I can configure everything. Everything just works.
  9. Well - not everything: When I tried to go back to the Startup Security Utility with the intension to now disable the right to boot from external HDs (to increase security, because I only wanted to allow this for my migration via CCC) the error message "No administrator was found." is coming up.


All my attempts to resolve this, e.g. by deleting PRAM or SMC or creating a new admin, then reboot and then try this one: All failed.


Now, I am sitting here with a brand new MacBook Pro and a seemingly unresolvable gaping security hole.


I cannot really believe that this is really an unresolvable issue, so I will try more Apple support employees by calling the support again and I will try to google even more. If I'll resolve it, I'll post the solution here.


If somebody solved it - would be glad to learn from you.

33 replies

Nov 5, 2018 1:36 PM in response to Mirko_

tried again with this result:


2018-11-05 22:34:54.068 sysadminctl[2710:87553] setSecureTokenAuthorizationEnabled error Error Domain=com.apple.OpenDirectory Code=5101 "Authentication server refused operation because the current credentials are not authorized for the requested operation." UserInfo={NSLocalizedDescription=Authentication server refused operation because the current credentials are not authorized for the requested operation., NSLocalizedFailureReason=Authentication server refused operation because the current credentials are not authorized for the requested operation.}

Nov 15, 2018 3:00 PM in response to Cyrus1111

I am having this issue of no admin acct in recovery, and only used TM backup during setup of my imac pro. No CCC etc. But the terminal command to get a token doesn't work and I have no interest in reinstalling just to get into startup security utility. Is there any other way that doesn't involve a new install procedure?


in terminal it says:


Secure token is DISABLED for user "me". Any way to enable secure token for me?

Nov 16, 2018 12:25 PM in response to Mirko_

Don't remember the exact message I received for that terminal command above, but The solution is to toggle filevault on and then back off. Then the secure ticket or whatever it is called is created and the log in recovery environment into security utility works. I now have turned off everything in there as well. The problem was, often upon boot up the imac pro shuts itself down and powers off half way through a cold startup. (The next boot goes on normally) The error report that comes up on the next normal boot shows "bridge os" as the problem. I am certain that whatever issues that people had with the T2 chip early on, have not entirely been fixed since this is a brand new imac pro and the latest mojavi. I don't need the secure stuff and am hoping that disabling the stuff if recovery helps to keep these bridge os panics down to a minimum. If the issue is with the chip and not software or firmware updates, then I guess we are stuck with it.

Nov 16, 2018 12:54 PM in response to grdh20

This is one of the three solution that can work but not necessarily. In fact it didn’t work with me.

I had the also the third suggested by mr. Bombich (the first should be in this post if I’not wrong) but unfirtunately the email is lost. I’ll check if I can recover it and post it here. In any case if you contact mr. Bombich he’ll reply you for the three solution. In my experience neither will be ever used. Better a fresh install and migration from CCC (admin included).

Cheers. Simon

Jan 2, 2019 7:51 PM in response to majortom1967

I bought a new Mac Mini late December 2018 in late November, and it worked fine for a few weeks.


When the Mojave 10.14.2 Update took place in early December, I attempted to perform the update, but was left with a machine that had trouble booting, eventually reporting no bootable disk.


Attempting to recover/reinstall Mojave, I learned that neither would work, and that my start up was blocked because no administrator could be found in the start up disk security software utility. Local Apple “Genius bar“ experts were clueless. My machine is now in the process of being repaired.


Does anybody know how to prevent this problem from occurring?


It appears that logging in to the terminal command can provide some relief in some circumstances, But for those of us who have encountered an unbootable disk and no way to externally boot, and no way to reinstall Mojave, and no way to recover using Time Machine, the results are a catastrophe with no obvious way to prevent reoccurrence.


Clearly bridgeOS, the T2 chip, in the latest batch of Apple firmware/software/hardware are involved, since this problem does not occur except on the three Apple products which contain the T2 “feature“. Had I known I was buying such a headache, I would definitely have never purchased the new mini, a MacBook Pro, or an iMac Pro, the three new products involved in this issue.


Would it help for example, to create multiple administrators on the start up disk, so they had a single missing administrator token would be less likely to render the start up disk is useless?


Would a disk with multiple partitions, each of which had a start up system, perhaps allow emergency start up in another partition who’s token and administrator are still present even though some other partition is corrupted ?


Any other ideas? This is a terrible, unreliable environment for getting work performed in a reliable and safe manner. Clearly there must be some other solutions until Apple figures out how to fix this serious problem properly.


Thanks for any info,


Larry

Startup Security Utility - No administrator was found.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.