Skip Navigation

Lock a device

You can temporarily lock an infected or potentially infected device, disabling its LAN and
Wi-Fi
network capabilities to stop command and control activity, the exfiltration of data, or the lateral movement of malware. You can lock a device for up to 96 hours. You can retrieve an unlock key from the console to unlock a device before the end of the lockdown period.
The lockdown feature is currently supported for
Windows
and
macOS
devices only.
  1. In the management console, on the menu bar, click
    CylanceOPTICS > Devices
    .
  2. Find the device.
  3. Click
    Actions > Lockdown Device
    .
    This option is not available if the device is offline.
  4. Select a lockdown period.
  5. Click
    Confirm Lockdown
    .
  6. If you want to unlock a device before the end of the specified lockdown period, click
    Actions > Show Unlock Key
    . Copy the unique unlock key and run the following commands on the device:
    OS
    Commands
    Windows
    1. Navigate to the
      Optics
      executable folder (by default, C:\Program Files\Cylance\Optics).
    2. Run
      CyOptics.exe control --password
      <unlock_key>
      unlock -a
    macOS
    1. Run
      cd /Library/Application\ Supprt/Cylance/Optics/CyOptics.app/Contents/ Resources
    2. Run
      sudo ../MacOS/CyOptics control --password
      <unlock_key>
      unlock -net