MacTech 06092020

MacTech Groups Agenda
Tuesday, May 12, 2020
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd 

Announcements – 5 min 

OIT only supports macOS 10.13.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Apple WWDC 2020 June 22-26 – free online this year developer.apple.com/wwdc20/
PSU MacAdmins Conference is Thursdays during June 1300 -1500 Campfire sessions. macadmins.psu.edu
No MacTech Meeting in July 2020

 

Training – 5 min (any course available via Meet/Zoom upon request) 

OIT-iOS Mobile Device Security  – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT 

OIT-Managing Apple Devices with Jamf Pro – TBA –  reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT 

OIT-Jamf Pro Best Practices for Packagers – TBA –  reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT 

OIT-Advanced Apple Device  Management with Jamf Pro – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT 

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/

 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is 10.21.0 Jamf Pro 10.21.0 in test on nccloudtest.jamfcloud.com. Jamf Pro 10.22b2 is the latest beta.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See https://oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/ 

Patch Definition Management – Kinobi Standard no change

Backup for Endpoints – CrashPlan production service is at version 8.0.0. Automatic update from Cloud.  Use the NCSU-Campus-Install Code42 CrashPlan7.7.0.pkg for new installs which should autoupdate (7.2 for 10.12 or less will not update to 8.x  but will continue to work).  The 7.x client is compatible with 8.x server.  Note: Mac OS High Sierra 10.13 – end of support date September 2020.

Internet Recovery – No change. https://support.apple.com/en-us/HT204904

Software Packaging – No change.  Will be moving the Autopkg server to a new location (DC 1 closing) sometime June 2020.  No impact is expected.

AntiMalware – DetectX Swift is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   Still no meeting of the OIT AV Steering teams scheduled.  

Sensitive Data Discovery – NCSU-Campus-Spirion10800.pkg waiting for approval for 11.4.

Apple School Manager – No changes or updates. 

AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace. 

Endpoint Protection Standard – Phase 2 deadline-Dec 31, 2020.  See Jamf Pro Cheat Sheet at: 

oit.ncsu.edu/help-support/apple/jamf-pro/jamf-pro-policy-cheat-sheet/
Automated use of Eduroam is still on hold waiting on a new WolfTech root certificate with universal signing algorithm. No time frame is set.  Discussion 

— 

Issue in Jamf Pro where users in multiple groups can’t save Profiles – 10 min 

Jamf Support has confirmed an issue where Users with access to more than 1 Jamf Site can not save macOS configuration profiles including when creating new ones.  This is a known issue which is on track to be fixed in 10.22 or 10.23.  The work around is to make sure you id is only in 1 group.  For the few folks who are packagers this means removing your id from the packaging group unless you are actually creating packages. Discussion 

Testing Duo with Jamf Pro – 10 min 

We are beginning to test Duo MFA with Jamf Pro to increase security.  If successful, we will vote on a date to make MFA required.  
Discussion 

TechShort: Changing UUID on Profiles – 20 min
We are beginning to make a few template configuration profiles available to help with deployments so you can just download and add to your Jamf Site.  However each profile in Jamf Pro must have a globally unique identifier in the form of a UUID. Everette will demo how to create a new UUID in Terminal.app and replace in a profile with ProfileCreator.app.
Discussion 

WWDC – Reading the Tea Leaves – 20 min
What is your favorite WWDC rumor.  Everette will talk about some of his.

Q&A – 15 min
You ask we try to answer 

Next meeting: 

MacTech – NO JULY MEETING Tue. Aug 11, 2020 in Room B16-B Hillsborough from 2:30-4:30 pm (or virtual).
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.