MacTech 11092021

MacTech Groups Agenda
Tue, Nov 9, 2021
2:30 to 4:30 pm
Hillsborough B16-B  &
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Managing Apple Devices with Jamf Pro – Sep 23 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000007

OIT-Jamf Pro Best Practices for Packagers – Oct 26 – 1:30-4:30 pm Hillsborough B3 reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000006

OIT-Advanced Apple Device  Management with Jamf Pro – Nov 16 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000006

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT

Local Based Commercial Training – training.computertree.com/course/

JAMF Pro Training – www.jamf.com/training/

Service Updates – 30 min 

Configuration Management  -Jamf Pro production is currently 10.32.2, test on nccloudtest is 10.33.0, and current beta is 10.34B2.  Date for the production update to 10.33.0 is Nov 17, 2021 between 1800 and 2345.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Definition Management
No change A custom patch server is now available as part of Jamf Pro at no extra cost. The patch server is enabled on both test and production servers but no custom patches have been created.

Backup for Endpoints – The Code42  production service is at version 8.7.1. Code42 will be updating to version 8.8.0 for cloud service and client “sometime in Nov 2021”.    See:
https://support.code42.com/Release_Notes/Code42_app_version_8.8_release_notes
Existing clients are automatically updated from the cloud server.  For NEW installs only the package in JAMF is “NCSU-Campus-Install Code42-871.pkg”(will be updated when 8.8.0 is available). The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.

Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS

Software Packaging – no change

AntiMalware – No change.  DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat

macOS 12 Bits and Pieces  – 10 min
-Everette was successful in forcing an update from macOS 11.6 to macOS 12.0.1 using the Mass Action commands in Jamf Pro. The update took several hours (home network) to download before starting and there was no warning.
-Disabling the Erase All Contents and Settings

-Suppressing and Deferring macOS Updates
https://macosxbytes.wordpress.com/2021/11/02/software-update-profile-keys-demystified/

-Reviving Intel macOS devices that fail to upgrade
Some customers with a Mac that has the Apple T2 Security Chip might report that when they tried to update to macOS Monterey or tried to download the latest macOS Catalina or macOS Big Sur security update, their computer fails to start up.
To fix, revive the device using these instructions:
https://support.apple.com/guide/apple-configurator-2/revive-or-restore-an-intel-based-mac-apdebea5be51/mac
Note: Revive should preserve all user data
Discussion

VPN Security Update Cisco Secure AnyConnect 4.10.03104 – 5 min
ComTech will enable auto update on vpn.ncsu.edu for Cisco AnyConnect 4.1003104 in late Nov 2021.  The installer is in the Jamf Pro as NCSU-Campus-Cisco_Secure_AnyConnect_4.10.03104.pkg as universal for both intel64 and arm64.  Cisco has released a high vulnerability alert for all versions prior to 4.10.03104.  See: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-lib-hija-cAFB7x4q
Discussion

Jamf Pro Update to 10.33.0 – 10 min
Jamf Hosting will update our production Jamf Pro service to version 10.33.0 on Wed Nov 17, 2021 between 1800 and 2345 pm eastern time.  This update fixes more security issues and adds more support for the latest Apple OSes.  See release notes at –
https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/
Discussion

Latest Apple Hardware- 30 min
MacBook Pro hardware has been released with M1Pro and M1Max SOCs. We will take a look at the specs and talk about monitor support.
Discussion.

Q&A – 15 min
You ask we try to answer

Next meeting: 

MacTech – Tue. Dec 14, 2021  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.