Casper Suite Administrator's Guide v8.4 - JAMF Software

More documents

Recommendations

Info

Security This section explains the Casper Suite’s primary security measures: • Passwords Communication protocols • Public key infrastructure Passwords The Casper Suite lets you store individual accounts for client computers and reset the passwords if necessary. Passwords stored in the database are encrypted using a standard 128-bit RSA encryption with a 1024-bit key. Communication Protocols Security is built into the design of the Casper Suite. Connections between the JAMF Software Server (JSS), the other applications in the Casper Suite, and mobile devices take place over Secure Sockets Layer (SSL). The Casper Remote application and Recon’s network scanner connect to clients over Secure Shell (SSH), or remote login. Secure Shell (SSH) SSH is a network security protocol built into Mac OS X. For more information, go to: http://openssh.org/ Secure Sockets Layer (SSL) SSL is a security protocol for Internet communication. For more information, go to: http://www.openssl.org/ Public Key Infrastructure A public key infrastructure (PKI) is the design by which digital certificates are obtained, managed, stored, and distributed to ensure a secure exchange of data over a public network. For more information on PKI, go to: http://en.wikipedia.org/wiki/Public_key_infrastructure 14
Certificate Authority A certificate authority (CA) is a trusted entity that signs and issues the certificates required for certificatebased authentication. It is the central component of the PKI. The JSS has a built-in CA that is enabled by default, but you can integrate it with third-party CA if you prefer. For more information on CAs, go to: http://en.wikipedia.org/wiki/Certificate_authority Simple Certificate Enrollment Protocol Simple Certificate Enrollment Protocol (SCEP) obtains certificates from the CA and distributes them managed mobile devices, allowing over-the-air managements tasks to take place. The CA hosted by the JSS is SCEP-enabled by default. If you plan to use a third-party CA, it must be SCEPenabled. Certificates Certificates are electronic documents that validate the identity of a public key to ensure the encryption of data and establish trust. Web Server Certificate This certificate validates the identity of the JSS and establishes trust between the JSS and clients. Choosing to install this certificate prevents possible man-in-the-middle attacks by allowing clients to validate the certificate when connecting to the JSS. Clock skew can also be reduced to prevent the replay of messages from the JSS to client computers. If you are using the Casper Suite to manage mobile devices, a web server certificate is required to ensure that the devices are communicating with a valid JSS. Root CA Certificate This certificate establishes trust between the CA and Mac OS X clients; and the CA and managed mobile devices. Signing Certificate This certificate is used to sign messages passed between the between the JSS and Mac OS X clients; and the JSS and managed mobile devices. Apple Push Notification Service Certificate This certificate authenticates the JSS to Apple Push Notification service (APNs). Device Certificate This certificate validates the identity of Mac OS X clients and managed mobile devices each time they communicate with the JSS. 15
Page 1 and 2: Casper Suite 8.4 Administrator’s
Page 3 and 4: MySQL Mac OS iOS X Installers Windo
Page 5 and 6: Compatibility Understanding with Do
Page 7 and 8: Chapter 1: Administering the JAMF S
Page 9 and 10: • Add new printers Add and manag
Page 11 and 12: Utilities JAMF Helper The JAMF Help
Page 13: The following ports are used to com
Page 17 and 18: JSS Installer for Mac The JSS Insta
Page 19 and 20: Installing and Managing the JAMF So
Page 21 and 22: To create the jamfsoftware database
Page 23 and 24: Setting Up the JSS The first time y
Page 25 and 26: 9. Choose whether or not to create
Page 27 and 28: Upgrading the JSS Follow the instru
Page 29 and 30: Backing Up the Database You can use
Page 31 and 32: To stop scheduled database backups:
Page 33 and 34: Deleting Logs from the Database Ove
Page 35 and 36: Managing Distribution Points A key
Page 37 and 38: c. Enter the port in the Port field
Page 39 and 40: 6. Use the Encryption Method pop-up
Page 41 and 42: 6. Click Save. Change Management lo
Page 43 and 44: 7. Enter the user name and password
Page 45 and 46: Enabling Clustering Clustering allo
Page 47 and 48: Configuring Tomcat to Work with a L
Page 49 and 50: 6. Select a limited access option.
Page 51 and 52: server.xml The JSS Installer instal
Page 53 and 54: Memory Issues If there is a large a
Page 55 and 56: To view the status of database tabl
Page 57 and 58: Building Packages Introduction to C
Page 59 and 60: • If you delete a file while mak
Page 61 and 62: 4. Select Monitor File System Chang
Page 63 and 64: To create a package source from use
Page 65 and 66:
4. When the conversion is complete,
Page 67 and 68:
Restoring a Deleted File or Folder
Page 69 and 70:
To add a postflight script that rem
Page 71 and 72:
Description.plist File The descript
Page 73 and 74:
3. Control-click (or right-click) t
Page 75 and 76:
Building a DMG When used in conjunc
Page 77 and 78:
Packaging the OS When you’re fini
Page 79 and 80:
Package Preferences Composer allows
Page 81 and 82:
Exclusion List The exclusion list a
Page 83 and 84:
Building Your Client Management Fra
Page 85 and 86:
d. Verify the changes are correct a
Page 87 and 88:
Authentication Type If the LDAP ser
Page 89 and 90:
c. Click the Test button. 6. To loo
Page 91 and 92:
Tools for Troubleshooting LDAP Serv
Page 93 and 94:
5. Enter user information on the Ac
Page 95 and 96:
7. Configure accounts settings on t
Page 97 and 98:
Adding Software Update Servers Appl
Page 99 and 100:
Adding NetBoot Servers If you have
Page 101 and 102:
5. Select the NetBoot option and cl
Page 103 and 104:
Managing Buildings and Departments
Page 105 and 106:
Managing Network Segments A network
Page 107 and 108:
Managing Packages This section expl
Page 109 and 110:
To change package attributes using
Page 111 and 112:
Options Pane This pane lets you spe
Page 113 and 114:
Install Only if SWU Reports are Ava
Page 115 and 116:
4. Enter a display name for the ins
Page 117 and 118:
8. Click the Options tab and set th
Page 119 and 120:
Adding a Disk Image of a Mac OS X I
Page 121 and 122:
5. Enter a display name for the ins
Page 123 and 124:
7. Click the Options tab and select
Page 125 and 126:
8. Use the Compare pop-up menu to s
Page 127 and 128:
Managing Scripts This section expla
Page 129 and 130:
Summary Pane This pane displays an
Page 131 and 132:
Page 133 and 134:
To empty the trash using the JSS: 1
Page 135 and 136:
To change printer attributes using
Page 137 and 138:
Page 139 and 140:
Managing Dock Items Adding Dock Ite
Page 141 and 142:
10. If you are binding client compu
Page 143 and 144:
4. Click the New Directory Bindings
Page 145 and 146:
Configuring the Computer Management
Page 147 and 148:
7. When you complete the assistant,
Page 149 and 150:
Computer Management Framework Setti
Page 151 and 152:
Apply User Level Managed Preference
Page 153 and 154:
To set up or modify security prefer
Page 155 and 156:
5. Click the Edit MAC Address link
Page 157 and 158:
Check-in frequency is configured as
Page 159 and 160:
Triggered By (Required) Choose the
Page 161 and 162:
Scripts Pane This pane lets you con
Page 163 and 164:
Reboot Pane This pane lets you set
Page 165 and 166:
c. Select the Add checkbox across f
Page 167 and 168:
To edit a policy using the JSS: 1.
Page 169 and 170:
Note: These numbers are based on a
Page 171 and 172:
7. Enter a display name for the att
Page 173 and 174:
Adding Custom Search Paths By defau
Page 175 and 176:
6. Select the Default checkbox to d
Page 177 and 178:
Managing Peripheral Types You can t
Page 179 and 180:
Acquiring Mac OS X Computers There
Page 181 and 182:
Once these steps are complete, Reco
Page 183 and 184:
4. Enter the IP address of the comp
Page 185 and 186:
6. (Optional) Select Location in th
Page 187 and 188:
4. In the Computer Name field, ente
Page 189 and 190:
Acquiring a Single Computer by Runn
Page 191 and 192:
Acquiring Computers Manually This a
Page 193 and 194:
Acquiring Mobile Devices You can ac
Page 195 and 196:
Performing an Advanced Computer Sea
Page 197 and 198:
Display Fields Pane This pane lets
Page 199 and 200:
Viewing Computer Search Results By
Page 201 and 202:
• Total count of each version of
Page 203 and 204:
Application Distribution Report (PD
Page 205 and 206:
If you are exporting this document
Page 207 and 208:
Category Description Actions that y
Page 209 and 210:
Performing an Advanced Peripheral S
Page 211 and 212:
8. Click the items that you want to
Page 213 and 214:
Searching Software Inventory Once y
Page 215 and 216:
Page 217 and 218:
XML This view exports your search r
Page 219 and 220:
8. Click Continue to confirm the ch
Page 221 and 222:
4. Choose “Look up Purchasing Inf
Page 223 and 224:
Editing a Computer Record You can u
Page 225 and 226:
Deleting a Computer from the JSS Yo
Page 227 and 228:
6. To send an email notification to
Page 229 and 230:
Suppressing Software from Reports I
Page 231 and 232:
Managing Custom Reports You can add
Page 233 and 234:
4. Click the Custom Reports link. 5
Page 235 and 236:
As a safety mechanism, drives that
Page 237 and 238:
• You can make this the only acco
Page 239 and 240:
d. If the account is a new account,
Page 241 and 242:
d. Click OK. 11. Repeat steps 2 thr
Page 243 and 244:
d. Click OK. 12. Repeat steps 4 thr
Page 245 and 246:
3. Specify credentials for the loca
Page 247 and 248:
8. Click the Install button. To vie
Page 249 and 250:
4. In the list of packages, locate
Page 251 and 252:
4. In the list of directory binding
Page 253 and 254:
5. Choose the network configuration
Page 255 and 256:
Managing Autorun Preferences Autoru
Page 257 and 258:
4. Click Autorun across from the co
Page 259 and 260:
PreStage Imaging PreStage imaging a
Page 261 and 262:
16. If you chose to assign names to
Page 263 and 264:
Patch Management Running Software U
Page 265 and 266:
3. Click the Packages tab and selec
Page 267 and 268:
• To edit an existing policy, cl
Page 269 and 270:
Software Distribution Installing Pa
Page 271 and 272:
10. Click the Packages tab and clic
Page 273 and 274:
Caching Packages Caching packages a
Page 275 and 276:
13. Click Save. Clients execute the
Page 277 and 278:
Installing Cached Packages You can
Page 279 and 280:
12. Click the Add Package(s) button
Page 281 and 282:
11. Click Save. Client computers ex
Page 283 and 284:
Uninstalling Packages You can unins
Page 285 and 286:
10. Click the Packages tab and clic
Page 287 and 288:
Using the Self Healing Feature In o
Page 289 and 290:
Remote Control Overview of Remote C
Page 291 and 292:
Using Screen Sharing The instructio
Page 293 and 294:
Settings Management Managed Prefere
Page 295 and 296:
The following table shows how Manag
Page 297 and 298:
8. Click the Settings tab. 9. Selec
Page 299 and 300:
3. Click the Managed Preferences li
Page 301 and 302:
5. Select the Import from Manifest
Page 303 and 304:
14. Specify a value for the prefere
Page 305 and 306:
When you are done creating the prof
Page 307 and 308:
To install a Mac OS X configuration
Page 309 and 310:
Removing Mac OS X Configuration Pro
Page 311 and 312:
6. If you want to specify parameter
Page 313 and 314:
5. Specify whether you want to run
Page 315 and 316:
3. Click the Policies link. 4. Crea
Page 317 and 318:
Managing Dock Items Before you add
Page 319 and 320:
Managing Local Accounts You can man
Page 321 and 322:
Once these steps are complete, Casp
Page 323 and 324:
To reset the password for a local a
Page 325 and 326:
9. Click the Scope tab and assign a
Page 327 and 328:
Binding to a Directory Service Befo
Page 329 and 330:
Managing Open Firmware/EFI Password
Page 331 and 332:
License Management Creating License
Page 333 and 334:
3. Click the Licensed Software Mana
Page 335 and 336:
6. Depending on the item that you w
Page 337 and 338:
5. Click the Search Licensing butto
Page 339 and 340:
Page 341 and 342:
One record is displayed per line, a
Page 343 and 344:
Sending Notifications on Licensed S
Page 345 and 346:
Usage Management Application Usage
Page 347 and 348:
• Click the disclosure triangle
Page 349 and 350:
5. Click the Computer Usage Logs li
Page 351 and 352:
10. To display a message to the use
Page 353 and 354:
8. In the Username field, specify t
Page 355 and 356:
Managing End-User Authentication Pr
Page 357 and 358:
Making Policies Available in Self S
Page 359 and 360:
2. Click the Management tab. 3. Cli
Page 361 and 362:
Managing Self Service Plug-ins The
Page 363 and 364:
6. Click the Edit link across from
Page 365 and 366:
Installing Items from Self Service
Page 367 and 368:
Accessing Plug-ins Plug-ins are dis
Page 369 and 370:
Building Your MDM Framework Configu
Page 371 and 372:
5. Select Use External Certificate
Page 373 and 374:
7. On the Request Cert pane, follow
Page 375 and 376:
5. Select or deselect options as ne
Page 377 and 378:
Enrollment Enrolling Mobile Devices
Page 379 and 380:
8. Set an expiration date for the i
Page 381 and 382:
Enrolling Connected Mobile Devices
Page 383 and 384:
3. Click the Mobile Device Enrollme
Page 385 and 386:
4. Click the Enrollment Profiles ta
Page 387 and 388:
3. Click the Mobile Devices link ab
Page 389 and 390:
Page 391 and 392:
Viewing Mobile Device Search Result
Page 393 and 394:
Searching Mobile Device Apps You ca
Page 395 and 396:
Page 397 and 398:
XML This view exports your search r
Page 399 and 400:
Mass Emailing End Users Mass emails
Page 401 and 402:
Editing a Mobile Device Record You
Page 403 and 404:
6. Click the Add icon. 7. Click the
Page 405 and 406:
Creating Mobile Device Groups Mobil
Page 407 and 408:
10. Repeat steps 7 through 9 as nee
Page 409 and 410:
5. Select Create a Configuration Pr
Page 411 and 412:
Dynamically Populating Location Inf
Page 413 and 414:
7. Verify the display name for the
Page 415 and 416:
Updating iOS Configuration Profiles
Page 417 and 418:
Deleting an iOS Configuration Profi
Page 419 and 420:
5. Choose the command that you want
Page 421 and 422:
App Distribution About Managed Apps
Page 423 and 424:
Requirements To install a managed a
Page 425 and 426:
6. Click Choose File and select the
Page 427 and 428:
6. Enter the app name, bundle ident
Page 429 and 430:
5. Enter a new version number for t
Page 431 and 432:
4. Click the Delete link across fro
Page 433 and 434:
6. Enter the name of the app and ch
Page 435 and 436:
11. If you chose to install the app
Page 437 and 438:
To remove an App Store app: 1. Log
show all

Casper Suite Administrator's Guide v8.4 - JAMF Software

Create successful ePaper yourself

Delete template?

Save as template?