Highlights
- Bug Fixes
Bug Fixes
- Fixed an issue where signing in with a PIN on macOS could fail with a “Smartcard algorithm initialization error”, forcing users to reboot or fall back to TouchID. PIN sign-in now works reliably after macOS upgrades and after running through the smart card repair dialog.
- Important Note:
macOS 26.4 introduced a change to user’s keychains the prevented TruU from accessing information stored there. Following an upgrade to this version of macOS, the Mac Authentictor may initiate a repair process to restore normal access to the user’s keychain. If the user starts the repair process but cancels the keychain prompt, they will have to initiate the repair process again. They may see many keychain prompts after cancelling. After all the prompts they will need to click the “Repair” button and complete the first prompt to restore proper operation.
- Important Note:
- Fixed an issue where an enrolled Mac could be unexpectedly unenrolled with an “Enrollment has timed out” message in the Admin Console, even when no user action had been taken. Devices now stay enrolled through normal idle and active use.
- Fixed an issue where smart card pairing failed during enrollment for standard macOS accounts whose usernames contain a dot (such as john.doe), because the helper’s sudoers file was silently ignored by macOS. Pairing now completes successfully for these accounts and ctkbind is granted the access it needs.
- Fixed a memory leak that could occur after unenrollment if the unenroll happened during a narrow timing window. The authenticator no longer consumes excessive memory or risks triggering an out-of-memory shutdown of other apps.

