For most modern Windows and Mac systems, Thunderbolt devices are automatically approved and will ‘just work’ once connected. Apple Mac laptops with Apple CPUs running macOS Ventura (13) or newer, will prompt you to manually approve the device the first time you connect it.
The summary table below provides the specific details at a glance, and the text that follows explains the table in more detail.
Thunderbolt Approval / Authentication Summary Table
| Platform | CPU Type | OS Version | Approval Needed? |
|---|---|---|---|
| Windows 11 | Intel CPU (Thunderbolt 4 or 5 host) | Windows 11 version 21H2 or newer | No - automatically approved |
| macOS (Laptop) | Apple CPU | macOS 13 Ventura or newer | Yes - manual approval required |
| macOS (Desktop) | Apple CPU | macOS 13 Ventura or newer | No - automatically approved |
| macOS (Laptop or Desktop) | Apple CPU | macOS 11 Big Sur, macOS 12 Monterey | No - automatically approved |
| macOS (Laptop or Desktop) | Intel CPU (Thunderbolt 3 host) | macOS 13 Ventura or newer | No - automatically approved |
| Windows 10 / Early Windows 11 versions | Intel CPU (Thunderbolt 3 or 4 host) | Windows 11 versions prior to 21H2 | Sometimes - depends on host system configuration |
Why Authentication Exists
To expand further, Thunderbolt 3, 4 and 5 are in essence external connections to the host computer’s internal PCI Express bus. This type of low-level and high speed connection warranted security protocols to prevent unauthorized access to user data.
Windows: From Intel Software to Native OS Support
When Thunderbolt 3 Windows systems were first introduced in late 2015 it was necessary to use Intel Thunderbolt software to manually authenticate and approve external Thunderbolt devices.
With the introduction of Thunderbolt 4 Windows systems in 2020, it was still necessary to have Intel Thunderbolt software installed on the host computer. However, in most cases the authentication and approval process would happen automatically greatly simplifying the process.
Starting with Windows 11 version 21H2 released in October of 2021, Microsoft integrated support for both USB4 and Thunderbolt into the Windows operating system → Microsoft USB 4 connection manager introduction
This means that with most modern Thunderbolt 4 and Thunderbolt 5 computers running the latest version of Windows 11 it is no longer necessary to install Intel Thunderbolt software on the host computer in order to manage Thunderbolt devices. In most cases, the authentication and approval process will still happen automatically.
macOS: From Intel CPUs to Apple CPUs
When Thunderbolt 3 Mac systems with Intel CPUs were first introduced in 2016, the authentication and approval mechanism was built-in to macOS and was transparent to the end user.
Apple introduced Mac computers based on Apple CPUs in 2020. Macs based on Apple CPUs running macoS 11 Big Sur or macOS 12 Monterey would automatically approve and authenticate Thunderbolt devices when connected.
macOS 13 Ventura was released in 2022 and for portable Macs with Apple CPUs Apple introduced a feature known as ‘Accessory Security’ (also known as ‘Restricted Mode’) → Manage accessory access to Apple devices
By default, portable Macs (i.e. laptops) with an Apple CPU running macOS 13 Ventura or newer version of macOS will require the end user to authenticate and approve a Thunderbolt device when initially connected.
Stationary Macs (i.e. desktops) with an Apple CPU running macOS 13 Ventura or newer version of macOS do NOT implement the ‘Accessory Security’ feature. As a result, Thunderbolt devices will be automatically approved and authenticated when initially connected.
Apple Macs with Intel CPUs (both laptop and desktops) running macOS 13 Ventura or newer do NOT implement the ‘Accessory Security’ feature. As a result, Thunderbolt devices will be automatically approved and authenticated when initially connected.
If you have any questions please feel free to contact us at support@plugable.com and we'll be happy to help!
