product icon

Update LastPass Workstation MFA for Mac

    When a new version of LastPass Workstation MFA is available for macOS, LastPass admins or users (with elevated permissions) can update by downloading the latest version then running the installer over the currently installed version – no need to remove the previous version.

    Workstation MFA for macOS supports the native macOS remote desktop feature.

    Troubleshooting: If you encounter a message, "The installer is corrupt" then running the latest version of the installer over the currently installed version will resolve this error.

      Download the latest version of the installer.

      1. Log in with your email address and master password to access the new Admin Console at https://admin.lastpass.com.
      2. Go to Applications > MFA Apps.
      3. Select macOS workstations.
      4. Click Download the installer.
      5. Save the WorkstationMFAMac.zip file to your desired location (default is ~/Downloads) and unzip it.
        A new folder named "WorkstationMFAMac" opens and contains the following files:
        • Uninstaller.pkg
        • Installer_Unconfigured.pkg
        • configure_wmfa.sh
      6. Back on the "Set up integration" page, select Save & assign users.
      7. In the Assign users & groups window, select Assign users & groups to begin making your selections.
      8. Search for and select your desired users and/or groups, then click Assign.
      9. Click Save & continue > Finish.

      Configure the installer package.

      1. Open the Terminal.app on your Mac.
      2. Execute the following command: 
        cd Downloads/WorkstationMFAMac
        Note: If you extracted the .zip file to a different location than ~/Downloads, then enter that path after cd instead.
      3. Execute the following command: 
        chmod +x configure_wmfa.sh
      4. Execute the following command: 
        ./configure_wmfa.sh Installer_Unconfigured.pkg
      5. Paste the integration key (that you copied in Step #8 above), then hit Enter.
      6. Paste the integration secret (that you copied from Step #9 above), then hit Enter.
      7. When prompted to Enable Offline Mode, choose one of the following:
        • Enter yes if you want allow users to log in to their Mac workstations when no internet connection is present (allowing them to skip MFA after entering their Mac password).
        • Enter no (most secure option) to prohibit users from logging in to their Mac workstations unless there is an internet connection present (does not allow them to skip MFA after entering their Mac password).

        Result: A newly configured installer package is created (in the same directory as Step #11 above) with the name Configured_Installer_<version number>.pkg (e.g., Configured_Installer_1.2.0.pkg).

        Tip: You can deploy your configured installer package to an unlimited number of Mac workstations. If desired, you can create separate installer packages for specific groups within your organization (e.g., offices, locations, departments, etc.).

      Run the installer package.

      1. Choose from the following installation methods:
        Installation Method Instructions
        Silent installation
        1. Open Terminal.app.
        2. Enter the following command: 
          sudo installer -pkg "/Downloads/Configured_Installer_<version number>.pkg -target /
          Note: The <version number> should match the value outlined in the Result of Step #19 above.
        3. When prompted, enter your Mac admin credentials.
        4. Close the Terminal.app window when installation is complete.
        Manual (GUI) installation
        1. Open the Configured_Installer_<version number>.pkg file to launch the setup.
        2. Select Continue > Install.
        3. When prompted, enter your Mac admin credentials.
        4. Select Close when installation is complete.
      2. Reboot your Mac.
    Results: You have updated the Workstation MFA installer for Mac.
    What to do next: Once configured, you can distribute the installer package using your organization's preferred deployment methods.
    Note: Instructions will vary, depending on your preferred distribution method.

    PLEASE READ BEFORE PROCEEDING!

    Warning: All users must enable and enroll the LastPass Authenticator as their multifactor option for their LastPass vault before Workstation MFA is deployed – if this action is not taken beforehand, any user that does not have the LastPass Authenticator app set up will be locked out of their workstation and unable to log in.
    Related Articles