Passcode authentication

Passcode authentication is designed primarily for DeployR servers running on an internal (corporate) network. Before a task sequence can be executed, the technician needs to specify the passcode that has been configured on the DeployR server. This means that anyone who knows the passcode value can access any task sequences and content items defined in DeployR.

This is designed primarily to ensure that random users do not accidentally do something (e.g. reimage their computer) that they would later regret.

It is recommended that this passcode be changed periodically.

To configure the passcode, open the "Configure DeployR" shortcut from the Start menu. Navigate to the "Security Settings" section and type in the desired passcode to use. Verify the changes, then save them. Make sure the DeployR service is running.

Note that Entra ID authentication and certificate authentication takes precedence over passcode authentication. To use passcode authentication, remove the Entra ID auth settings.

Note: It is possible to use passcode authentication for task sequences initiated in the full OS, even when Entra ID authentication is enabled. The passcode value to use can be passed in by setting a variable named "Passcode"; see Starting a task sequence in an existing OSfor more information on how to do this.

Verification

To ensure everything is configured and working, boot into Windows PE (using an ISO, PXE, etc.). You should be challenged to type in the specified passcode:

And the DeployR client will then continue automatically.