"Authentication is Disabled" Mac Secure Token Issue

This article provides a fix for Macs receiving the "Authentication is disabled" error message when trying to install a software update.  This error is caused by a corrupt Secure Token.

Note: Even if a user receives this error while trying to manually install a software update.  The update will still automatically install during the nightly maintenance window if the computer is on.

Solution Options
Below are three methods to resolve the "Authentication is Disabled" error ordered by level of complexity for the end user.

1. Leave the Mac on overnight so the update automatically installs.
2. Run the "First Aid - SecureToken Fix" in Jamf Self Service.  You will first be prompted for the user name and password of the affected user account followed by the user name and password of an account with administrator rights.
   
   
    
3. Manually run the script below in the "Terminal" application on the affected Mac.  Replace the "username", "password", "admininusername", and "adminPassword" fields with the actual account information. 

   sysadminctl -secureTokenStatus <username>
   sysadminctl -secureTokenOff <username> -password - -adminUser <adminusername> -adminPassword -
   sysadminctl -secureTokenOn <username> -password - -adminUser <adminusername> -adminPassword -
   diskutil apfs UpdatePreboot /