MacTech Groups Agenda
Tue, Jan 12, 2021
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd
Announcements – 5 min
OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
Training – 5 min (any course available via Meet/Zoom upon request)
OIT-iOS Mobile Device Security – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT
OIT-Managing Apple Devices with Jamf Pro – Feb 11, 2021 – 1:30 to 4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000006
OIT-Jamf Pro Best Practices for Packagers – Mar 11, 2021 – 1:30-4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000005
OIT-Advanced Apple Device Management with Jamf Pro – Apr 8, 2021 – 1:30 -4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000005
CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Service Updates – 30 min
Configuration Management – Jamf Pro production is 10.26.0 Jamf Pro 10.26.0 in test on nccloudtest, and three is no current beta. Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Patch Definition Management – No change. Kinobi has stated they are in progress of integrating with Jamf Pro.
Backup for Endpoints – The Code42 production service is at version 8.5.0 Existing clients are automatically updated from the cloud server. For New installs only the package in JAMF is “NCSU-Campus-Install Code42-850.pkg”. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.
Working with Code42 support to deal with issue where some users get moved to default Sub-Org after the 8.5.0 update.
Internet Recovery – For Intel Macs: https://support.apple.com/en-us/HT204904.
For ASi Macs: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS
Software Packaging – No change. Still having to fix update failures manually. Most recipes have not been updated to pull installers for Universal versions yet.
AntiMalware – No change. DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
Sensitive Data Discovery – OIT S&C is requesting we remove the product. See discussion below. Use the Jamf Pro package NCSU-Campus-Uninstall_Spirion.pkg to remove both Spirion and older Identity Finder.
Apple School Manager – No change. REMINDER: For device management ALWAYS use Edit Device Management and NOTHING ELSE!!
AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace.
Endpoint Protection Standard – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at: go.ncsu.edu/jamfcheat
—
Spirion Removal – 10 min
OIT Security and Compliance has asked that all versions of Spirion and the older Identity Finder be removed (from all platforms). For macOS use the NCSU-Campus-Uninstall_Spirion.pkg package in Jamf Pro to remove all versions. Licenses will still be available for remediation as needed see software.ncsu.edu for details by the end of Jan 2021. Discussion.
Adobe Flash is EOL and should be removed – 10 min
Adobe has completed End of Life for the Flash product and recommends immediate removal. The easy way is to use the Adobe Flash Player Install Manager in a Jamf Pro Policy that has Execute Command of:
/Applications/Utilities/Adobe\ Flash\ Player\ Instal\ Manager.app/Contents/MacOS/Adobe\ Flash\ Playe\r Install\ Manager -uninstall
That will work in most cases. If more in depth removal is require see:
derflounder.wordpress.com/2021/01/01/adobe-flash-is-dead-lets-get-it-removed/
Discussion.
Adobe issues with Apple Silicon – 10 min
Adobe products, except LightRoom from the App Store, do not yet run natively on Apple Silicon. Adobe has a support article to help run *some* of their products under Rosetta2.
helpx.adobe.com/download-install/kb/apple-silicon-m1-chip.html
However ALL current packages will fail to install on Apple Silicon and we have not repackaged them.
helpx.adobe.com/enterprise/kb/deploy-packages-to-arm-devices.html
At this point OIT recommends not installing Adobe Acrobat Pro or Adobe Acrobat Reader due to known issues and use Preview.app instead to read PDF files and fill in PDF forms. Adobe has stated intent to have ASi native versions of their CC 2021 products in 1st quarter 2021.
Discussion.
Apple Silicon and 3rd party “vendor lag” – 10 min
As with many new products, 3rd party software support for Apple Silicon native applications is lagging or confusing from several vendors. For example the Slack.app has 2 separate downloads instead of 1 Universal2 app. The Zoom enterprise download is the only installer that delivers a Universal2 app. On either intel or ASi devices, the file command line tool can be used to see if an app is Universal2. Example:
/usr/bin/file /Applications/zoom.us.app/Contents/MacOS/zoom.us
/Applications/zoom.us.app/Contents/MacOS/zoom.us: Mach-O universal binary with 2 architectures: [x86_64:Mach-O 64-bit executable x86_64] [arm64:Mach-O 64-bit executable arm64]
/Applications/zoom.us.app/Contents/MacOS/zoom.us (for architecture x86_64): Mach-O 64-bit executable x86_64
/Applications/zoom.us.app/Contents/MacOS/zoom.us (for architecture arm64): Mach-O 64-bit executable arm64
Also see this site for a list: isapplesiliconready.com
Discussion.
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Feb 9, 2021 Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.