Casper Admin Guide

658 Pages·2016·12.94 MB·English

Casper Suite Administrator's Guide
Version 9.92
JAMF Software, LLC Centrify is a registered trademark of Centrify
© 2016 JAMF Software, LLC. All rights reserved. Corporation in the United States
and/or other countries.
JAMF Software has made all efforts to ensure
that this guide is accurate. Cisco and IOS are trademarks or registered
trademarks of Cisco in the United States and
JAMF Software other countries.
100 Washington Ave S Suite 1100
Minneapolis, MN 55401-2155 Divide is a trademark or registered trademark
[phone] of Divide, Inc.

Firefox is a registered trademark of the Mozilla
Under the copyright laws, this publication may Foundation.
not be copied, in whole or in part, without the
written consent of JAMF Software, LLC. eDirectory is a trademark of Novell, Inc. in the
United States and other countries.
Active Directory and Windows are either
registered trademarks or trademarks of Likewise is a trademark of Likewise Software.
Microsoft Corporation in the United States
Linux is a registered trademark of Linus
and/or other countries.
Torvalds in the United States and other
ADmitMac is a registered trademark of countries.
Thursby Software Systems, Inc.
Java and MySQL are registered trademarks of
Adobe and Adobe Creative Suite are Oracle and/or its affiliates. Other names may
trademarks of Adobe Systems Incorporated. be trademarks of their respective owners.
Android, Chrome, Google, and Google Play Tomcat is a trademark of the Apache Software
are trademarks or registered trademarks of Foundation.
Google Inc.
All other product and service names
Apple, the Apple logo, Apple Configurator 2, mentioned are the trademarks of their
Apple Remote Desktop, Apple TV, AirPlay, respective companies.
Finder, FileVault, FireWire, iBeacon, iBooks,
iPad, iPhone, iPod touch, iTunes, Keychain,
Mac, MacBook, MacBook Pro, MacBook Air,
OS X, and Safari are trademarks of Apple Inc.,
registered in the United States and other
countries. Apple Care, App Store, iBooks Store,
iCloud, and iTunes Store are service marks of
Apple Inc., registered in the United States and
other countries.
The CASPER SUITE®, COMPOSER®,
the COMPOSER Logo®, JAMF SOFTWARE®,
the JAMF SOFTWARE Logo®, RECON®, and the
RECON Logo® are registered or common law
trademarks of JAMF SOFTWARE, LLC in the U.S.
and other countries.
Contents
Contents
13 Preface
14 About This Guide
15 Additional Resources
16 Overview of Technologies
17 Applications and Utilities
17 Casper Admin
17 Casper Focus
17 Casper Imaging
17 Casper Remote
18 Composer
18 jamf agent
18 jamf binary
18 JAMF Helper
18 JAMF Software Server
19 JDS Installers
19 Management Action
19 Recon
19 Recon.exe
19 Self Service for OS X
20 Self Service for iOS
20 Self Service Mobile for Android
21 Ports
24 Security
24 Passwords
24 Communication Protocols
25 Public Key Infrastructure
26 Signed Applications
27 Requirements
27 JAMF Software Server
28 Package Building
28 Inventory
29 Imaging
29 Remote Management
30 Self Service
30 Managing Mobile Devices
30 Casper Focus
31 Self Service Mobile
31 JDS Installer for Mac
31 JDS Installer for Linux
32 Computer Management Capabilities
3
32 Computer Management Capabilities
32 Management Capabilities for Computers
35 Mobile Device Management Capabilities
35 Management Capabilities for Institutionally Owned Devices
39 Management Capabilities for Personally Owned Devices
42 Before You Begin
43 Setting Up the JSS
44 Viewing the JSS on Different Types of Devices
44 Computer Display
45 Tablet Display
46 Smartphone and iPod touch Display
47 The JSS Dashboard
48 Adding Items to the JSS Dashboard
49 JSS Objects
49 Cloning a JSS Object
49 Editing a JSS Object
49 Deleting a JSS Object
50 Viewing the History of a JSS Object
51 JSS System Settings
52 JSS User Accounts and Groups
52 Requirements
52 Creating a JSS User Group
53 Creating a JSS User Account
54 Configuring Account Preferences
54 Configuring the Password Policy
55 Unlocking a JSS User Account
55 Cloning, Editing, or Deleting a JSS User Account or Group
56 Related Information
57 Integrating with LDAP Directory Services
57 Adding an LDAP Server Using the LDAP Server Assistant
58 Manually Adding an LDAP Server
58 Testing LDAP Attribute Mappings
59 Cloning, Editing, or Deleting an LDAP Server
59 Related Information
61 Integrating with an SMTP Server
61 Configuring the SMTP Server Settings
61 Testing the SMTP Server Settings
62 Related Information
63 Email Notifications
63 Requirements
64 Enabling Email Notifications
65 Activation Code
65 Updating the Activation Code
66 Change Management
4
66 Change Management
66 Requirements
66 Configuring the Change Management Settings
67 Viewing Change Management Logs in the JSS
67 Related Information
68 SSL Certificate
68 Requirements
68 Creating or Uploading an SSL Certificate
68 Related Information
69 Flushing Logs
69 Scheduling Log Flushing
70 Manually Flushing Logs
70 Related Information
71 Maintenance Pages
72 Creating a Maintenance Page Configuration
72 Cloning, Editing, or Deleting a Maintenance Page Configuration
73 JSS Summary
73 Requirements
74 Viewing the JSS Summary
74 Sending the JSS Summary to JAMF Software
74 Related Information
75 JSS Health Check Page
75 Using the JSS Health Check Page
76 Global Management Settings
77 Push Certificates
77 Requirements
77 Creating a Push Certificate
78 Uploading a Push Certificate (.p12)
78 Renewing the Push Certificate
79 Deleting the Push Certificate
79 Related Information
80 JAMF Push Proxy
80 Requirements
80 Requesting and Uploading a Proxy Server Token
80 Renewing the Proxy Server Token
81 Deleting the Proxy Server Token
81 Related Information
82 Integrating with GSX
82 Requirements
82 Configuring the GSX Connection Settings
83 Testing the GSX Connection
83 Renewing the Apple Certificate
84 Related Information
85 User-Initiated Enrollment Settings
5
86 Customizing the User-Initiated Enrollment Experience
87 Configuring the User-Initiated Enrollment Settings
88 Related Information
89 Integrating with the Device Enrollment Program
89 Requirements
89 Downloading a Public Key
90 Obtaining the Server Token File
90 Uploading the Server Token File to Configure an Instance of DEP
91 Refreshing DEP Instance Information
91 Editing or Deleting an Instance of DEP
92 Related Information
93 JSS URL
93 Viewing or Configuring the JSS URLs
93 Related Information
94 Public Key Infrastructure
94 Downloading the CA Certificate
95 Viewing or Revoking Certificates
95 Manually Creating a Certificate from a CSR
96 Creating a Backup of the CA Certificate
97 Integrating with an External CA
98 Related Information
99 Integrating with VPP
100 Requirements
100 Adding a VPP Account
100 Editing or Deleting a VPP Account
101 Related Information
102 Categories
102 Adding a Category to Casper Admin
102 Adding a Category to the JSS
103 Editing or Deleting a Category in Casper Admin
103 Cloning, Editing, or Deleting a Category in the JSS
103 Related Information
105 Event Logs
105 Requirements
105 Viewing Event Logs
106 Related Information
107 Server Infrastructure
108 About Distribution Points
110 Related Information
111 File Share Distribution Points
111 Adding a File Share Distribution Point
111 Cloning, Editing, or Deleting a File Share Distribution Point
112 Replicating Files to a File Share Distribution Point
112 Related Information
113 Cloud Distribution Point
6
113 Cloud Distribution Point
113 Requirements
114 Configuring the Cloud Distribution Point
114 Testing the Cloud Distribution Point
115 Replicating Files to the Cloud Distribution Point
115 Related Information
116 JAMF Distribution Server Instances
116 Requirements
117 Installing a JDS Instance on OS X
117 Installing a JDS Instance on Linux
118 Configuring a JDS Instance
118 Replicating Files to the Root JDS Instance
118 Viewing the Progress of File Replication
119 Viewing Inventory Information for a JDS Instance
120 Related Information
121 Software Update Servers
121 Adding a Software Update Server
121 Cloning, Editing, or Deleting a Software Update Server
122 Related Information
123 NetBoot Servers
123 Adding a NetBoot Server
123 Cloning, Editing, or Deleting a NetBoot Server
124 Related Information
125 Organizing Your Network
126 Buildings and Departments
126 Adding a Building or Department
126 Cloning, Editing, or Deleting a Building or Department
127 Related Information
128 Network Segments
128 Adding a Network Segment
128 Cloning, Editing, or Deleting a Network Segment
129 Related Information
130 iBeacon Regions
130 Requirements
131 Adding an iBeacon Region
131 Cloning, Editing, or Deleting an iBeacon Region
131 Related Information
133 Sites
133 Adding a Site
134 Cloning, Editing, or Deleting a Site
134 Adding Items to a Site
136 Related Information
137 Network Integration
137 Requirements
138 Adding a Network Integration Instance
7
138 Cloning, Editing, or Deleting a Network Integration Instance
139 Related Information
140 Scope
140 Configuring Scope
145 Managing Computers
146 Building the Framework for Managing Computers
146 Recurring Check-in Frequency
147 Startup Script
148 Login and Logout Hooks
149 Security Settings
151 Enrollment of Computers
151 About Computer Enrollment
153 User-Initiated Enrollment for Computers
156 User-Initiated Enrollment Experience for Computers
159 QuickAdd Packages Created Using Recon
162 Network Scanner
166 Remote Enrollment Using Recon
170 Local Enrollment Using Recon
173 Computer PreStage Enrollments
176 QuickAdd Packages Created Using Recon.exe
177 Local Enrollment Using Recon.exe
179 Composer
179 About Composer
180 Creating Package Sources
188 Package Manifests
191 Viewing and Editing the Contents of Package Sources
193 Adding Scripts to Package Sources
196 Editing PLIST Files in Package Sources
198 Localizations
201 Building Packages from Package Sources
203 Building OS Packages
205 Composer Preferences
210 Inventory for Computers
210 Computer Inventory Collection
211 Computer Inventory Collection Settings
215 Computer Extension Attributes
219 Computer Inventory Display Settings
220 Peripherals
223 Simple Computer Searches
226 Advanced Computer Searches
229 Computer Reports
231 Performing Mass Actions for Computers
237 Viewing and Editing Inventory Information for a Computer
244 Viewing Management Information for a Computer
249 Viewing the History for a Computer
256 Deleting a Computer from the JSS
8
257 Computer Groups
257 About Computer Groups
258 Smart Computer Groups
261 Static Computer Groups
263 Policies
263 About Policies
264 Managing Policies
267 Policy Payload Reference
271 User Interaction
273 Self Service for Computers
273 About Self Service for Computers
275 Installing Self Service on Computers
276 Self Service User Login Setting
277 Self Service Notifications Setting
278 Self Service Policies
280 Self Service Configuration Profiles for Computers
282 Self Service Plug-ins
284 Self Service User Experience on Computers
289 VPP Content Distribution for Computers
289 VPP-Managed Distribution for Computers
291 VPP Code Distribution for Computers
292 Simple VPP Content Searches for Computers
295 Advanced VPP Content Searches for Computers
298 VPP Content Reports for Computers
299 Software Distribution
299 Computer App Updates
301 Mac App Store Apps
306 Managing Packages
312 Managing OS X Installers
319 Administering Adobe CS3 and CS4
324 Installing Packages
328 Caching Packages
332 Installing Cached Packages
339 Uninstalling Packages
343 Patch Management
343 Running Software Update
347 Remote Control
347 Screen Sharing
349 Settings and Security Management
349 Managed Preferences
352 OS X Configuration Profiles
358 OS X Remote Commands
361 Managing Scripts
366 Running Scripts
370 Managing Printers
374 Administering Printers
9
378 Managing Dock Items
380 Administering Dock Items
384 Administering Local Accounts
388 Administering the Management Account
392 Managing Directory Bindings
394 Binding to Directory Services
398 Managing Disk Encryption Configurations
400 Deploying Disk Encryption Configurations
404 Issuing a New FileVault 2 Recovery Key
406 Administering Open Firmware/EFI Passwords
410 Imaging
410 About Imaging
411 Configurations
417 Booting Computers to NetBoot Images
421 Standard Imaging
424 PreStage Imaging
428 Autorun Imaging Settings
429 Autorun Imaging
435 Target Mode Imaging
439 Customizing the Imaging Process
442 Removable MAC Addresses
443 License Management
443 About Licensed Software
444 Licensed Software Records
448 License Compliance
449 Viewing License Usage
450 Application Usage for Licensed Software
451 Usage Management
451 Application Usage
453 Computer Usage
454 Restricted Software
456 Managing Mobile Devices
457 Enrollment of Mobile Devices
457 About Mobile Device Enrollment
459 Components Installed on Mobile Devices
460 User-Initiated Enrollment for Mobile Devices
463 User-Initiated Enrollment Experience for Mobile Devices
478 Apple Configurator Enrollment Settings
480 Supervision Identities
483 Enrollment Profiles
487 Mobile Device PreStage Enrollments
490 Inventory for Mobile Devices
490 Mobile Device Inventory Collection Settings
491 Mobile Device Extension Attributes
494 Mobile Device Inventory Display Settings
495 Simple Mobile Device Searches
10