如果您担心Mac被盗或丢失，您可以采取一些措施来保护自己。其中之一是使用最新的 i Mac、Mac Mini(Mac Minis)、MacBook Pro(MacBook Pros)和MacBook Air中包含的新(MacBook Airs)激活锁(Activation Lock)功能。它使用一种名为T2 安全芯片(T2 Security Chip)的新安全芯片，让您可以远程锁定和擦除您的Mac。
即使在擦除它之后，激活锁(Activation Lock)也会阻止其他人使用您的Mac，使其对其他人完全无用。要激活它，您需要 macOS Catalina，在您的Apple ID上(Apple ID)启用双重身份验证(two-factor authentication enabled)，并将安全启动(Secure Boot)设置为默认的“完全安全”设置。
Apple Mac 上的激活锁是什么？(What Is Activation Lock On Apple Mac?)
iPhone 和 iPad 等Apple(Apple)设备的用户已经熟悉Find My应用程序。这可以让您在Apple设备丢失或被盗时追踪它们，并在地图上精确定位它们的位置。它还允许您安全地锁定或擦除设备，以防止它被使用并阻止您的数据被盗。
Mac上的激活锁(Activation Lock)功能将这种以前仅限于 iOS 设备的安全性带到了较新的Apple Mac设备上。它需要T2 安全芯片(T2 Security Chip)才能安全地锁定和擦除您的Mac。从 2018 年开始，更新的 i Mac Pro和(Pro)Mac Minis和MacBooks（Pro和Air ）都有这个芯片。
与 iPhone 和 iPad 用户一样，这使您可以远程控制Mac安全到Find My app。您可以在线访问，也可以从iOS 或其他Mac设备上的“查找”应用程序访问。(Find My)
如果您想远程控制Mac并且您拥有多个 macOS 设备，则可以使用“查找”(Find My)应用程序来执行此操作。要访问它，请在Launchpad中(Launchpad)查找 Find My(Find My)，可从Mac屏幕底部的Dock访问。(Dock)
检查T2 安全芯片(T2 Security Chip)和激活锁状态(Activation Lock Status)
如果您不确定您的Mac是否安装了允许激活锁(Activation Lock)模式工作的T2 安全芯片(T2 Security Chip)，您可以从Mac的系统报告(System Report)中快速检查。
- 要访问您的Mac 系统报告(Mac System Report)，请单击以进入屏幕左上角的Apple 菜单，然后单击(Apple menu)关于本机(About This Mac)。
- 在Mac 信息对话框的概览选项卡中，单击(Overview)系统报告(System Report)按钮。
- 在左侧菜单的硬件部分下，单击(Hardware)控制器(Controller)。如果您没有看到Controller，请寻找iBridge。在Model Name下，您应该会看到Apple T2 Security Chip显示。
- 如果您安装了T2 安全芯片(T2 Security Chip)，请检查激活锁(Activation Lock)是否已激活。为此，请单击系统报告(System Report)中的硬件(Hardware)并检查激活锁状态(Activation Lock Status)字段。
- 如果将其设置为Enabled，则激活锁(Activation Lock)处于活动状态，您无需执行任何操作。如果显示已禁用，(Disabled,)您需要按照以下说明激活它。
- 要在 Mac 上启用激活锁(Mac)，(Activation Lock)您需要设置“查找我的 Mac”(Find My Mac)。但是，如果您在任何时候更改了安全启动(Boot)设置，则需要先进行更改。
将安全启动设置为完全安全(Set Secure Boot To Full Security)
仅当您的Mac 安全启动(Mac Secure Boot)设置设置为完全安全(Full Security)时，激活锁(Activation Lock)设置才有效。安全启动是现代(Secure Boot)Mac硬件上引入的另一种高级设置，可确保只有合法、受信任的Apple和Microsoft操作系统才能启动。
- 更改此设置需要您启动 macOS 恢复系统并访问启动安全实用程序。(Startup Security Utility.)为此，请在启动过程中出现Apple徽标时按住键盘上的Command + R
- 从那里，单击Utilities，然后单击Startup Security Utility。使用您的 macOS 用户名和密码进行身份验证，然后在Secure Boot下，确保启用了Full Security设置。
- 在此之后，像往常一样重新启动(Reboot)您的Mac以继续。
打开“查找我的 Mac”(Turn On Find My Mac)
Apple的Find My应用程序可让您跟踪您的Apple设备。它可以让您找到它们、远程控制和锁定它们，并在需要时擦除它们。
激活锁(Lock)是这种远程防御的核心，它需要启用“查找我的 Mac”(Find My Mac)设置。
- 要打开“查找我的 Mac(Find My Mac) ”，请点按左上角的Apple 菜单，然后点按(Apple menu)“系统偏好设置”(System Preferences)。
- 在您的系统偏好设置(System Preferences)中，点按Apple ID。在 macOS Catalina上，此条目位于窗口的右上角。
- 在您的Apple ID设置下，单击iCloud。在使用 iCloud 服务的各种应用程序下方列出，单击查找我的 Mac(Find My Mac)旁边的复选框。
- macOS 将提示您确认是否要启用“查找我的 Mac(Find My Mac) ”功能。要确认，请单击允许(Allow)。
启用后，您可以通过向系统报告(System Report)（Apple Menu > About This Mac > System Report > Hardware）报告来确认激活锁(Activation Lock)已启用。
使用“查找我的 Mac”(Using Find My Mac)
您可以在您拥有的其他Apple设备上使用“查找”(Find My)应用程序或访问iCloud 网站来使用(iCloud website)Mac上的激活锁(Activation Lock)。
- 使用与Mac相同的(Mac)Apple ID登录 iCloud 网站。单击(Click)“查找 iPhone(Find iPhone) ”按钮以访问“在线查找”(Find My)。尽管说 iPhone，这仍然适用于您的Mac。
- 您需要使用您的Apple ID重新登录。完成后，单击顶部菜单栏中的下拉菜单，然后从列表中选择您的Mac 。
- 要利用激活锁(Activation Lock)模式，请单击“查找”(Find My)页面中显示的选项菜单中的“锁定”。(Lock)如果您的设备丢失并且您想确保您的数据安全，您也可以单击擦除 Mac 。(Erase Mac)
按下任一选项后，您的Mac设备将开始远程锁定或擦除。
How To Enable Activation Lock On Your Mac Computer
If you’re worried about losing your Mac to theft or loss, there are some steрs you can take to protect yourself. One of those is to use the new Activation Lock feature, included on recent iMacs, Mac Minis, MаcBook Pros, and MacBook Airs. This uses a new security chip called the T2 Security Сhip to let you remotely lock and wipe your Mac.
Even after wiping it, the Activation Lock prevents anybody else from using your Mac, rendering it completely useless to anybody else. To activate it, you’ll need macOS Catalina, have two-factor authentication enabled on your Apple ID, and have Secure Boot set to the default “Full Security” setting.
What Is Activation Lock On Apple Mac?
Owners of Apple devices like iPhones and iPads will already be familiar with the Find My app. This lets you track your Apple devices down when they’re lost or stolen, pinpointing their location on a map. It also allows you to securely lock or erase the device to prevent it from being used and to stop your data from being stolen.
The Activation Lock feature on Mac brings this security, previously restricted to iOS devices, to newer Apple Mac devices. It requires the T2 Security Chip to be able to securely lock and wipe your Mac. The newer iMac Pro has this chip, as do Mac Minis and MacBooks (both Pro and Air) from 2018 onward.
Like iPhone and iPad users, this brings you remote control over your Mac security to the Find My app. You can access this online or from the Find My app on your iOS or other Mac devices.
If you want to control a Mac remotely and you have more than one macOS device, you can do this using the Find My app. To access it, look for Find My in the Launchpad, accessible from the Dock at the bottom of your Mac screen.
Checking T2 Security Chip and Activation Lock Status
If you’re unsure whether your Mac has the T2 Security Chip installed that allows the Activation Lock mode to work, you can quickly check this from your Mac’s System Report.
- To access your Mac System Report, click to enter the Apple menu in the top-left of your screen, then click About This Mac.
- In the Overview tab of your Mac’s information dialog box, click the System Report button.
- Under the Hardware section in the left-hand menu, click Controller. If you don’t see Controller, look for iBridge instead. Under Model Name, you should see Apple T2 Security Chip displayed.
- If you have the T2 Security Chip installed, check to see whether Activation Lock is already activated. To do that, click Hardware in your System Report and check the Activation Lock Status field.
- If this is set to Enabled, Activation Lock is active and you don’t need to do anything. If it says Disabled, you’ll need to follow the instructions below to activate it.
- To enable Activation Lock on your Mac, you’ll need to set up Find My Mac. If you’ve altered your Secure Boot setting at any point, you’ll need to change this first, however.
Set Secure Boot To Full Security
The Activation Lock setting will only work if your Mac Secure Boot setting is set to Full Security. Secure Boot is another advanced setting, introduced on modern Mac hardware, that ensures that only legitimate, trusted Apple and Microsoft operating systems can boot.
- Changing this setting requires you to boot into your macOS recovery system and access the Startup Security Utility. To do that, hold the Command + R keys on your keyboard as soon as the Apple logo appears during the boot process.
- From there, click Utilities, then Startup Security Utility. Use your macOS username and password to authenticate, then under Secure Boot, make sure that Full Security is the setting enabled.
- Reboot your Mac as normal to proceed after this point.
Turn On Find My Mac
Apple’s Find My app lets you keep track of your Apple devices. It lets you locate them, remotely control and lock them, and erase them, if needed.
Activation Lock is central to this remote defense, and it requires the Find My Mac setting to be enabled.
- To turn on Find My Mac, click to enter the Apple menu in the top-left, then click System Preferences.
- In your System Preferences, click Apple ID. On macOS Catalina, this entry is in the top-right of the window.
- Under your Apple ID settings, click iCloud. Listed under the various apps that use the iCloud service, click the checkbox next to Find My Mac.
- macOS will prompt you to confirm whether you want to enable the Find My Mac feature. To confirm, click Allow.
Once enabled, you can confirm that Activation Lock is enabled by reporting to your System Report (Apple Menu > About This Mac > System Report > Hardware).
Using Find My Mac
You can make use of the Activation Lock on your Mac by using the Find My app, either on other Apple devices you own or by visiting the iCloud website.
- Sign in to the iCloud website using the same Apple ID you use for your Mac. Click the Find iPhone button to access Find My online. Despite saying iPhone, this will still work for your Mac.
- You’ll need to sign in again with your Apple ID. Once you’ve down that, click the drop-down menu in the top menu bar, then select your Mac from the list.
- To take advantage of the Activation Lock mode, click Lock in the options menu that appears in the Find My page. You can also click Erase Mac if your device is lost and you want to ensure your data is secured.
With either of these options pressed, your Mac device will then begin to lock or erase remotely.
