Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 99 Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 99 Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 100 Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 100 Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 101 Notice: Trying to access array offset on value of type null in /var/www/mediawiki/webroot/mediawiki/includes/profiler/SectionProfiler.php on line 101 Difference between revisions of "Zero-Touch Deployment for Macs" - Library & ITS Wiki

Middlebury

Difference between revisions of "Zero-Touch Deployment for Macs"

m (Applied Heading 3 styles to section headers)
Line 1: Line 1:
  
'''<span style="font-size:larger;">What is Zero-Touch?</span>'''
+
=== '''<span style="font-size:larger">What is Zero-Touch?</span>''' ===
  
 
Zero-Touch deployment is a new method for provisioning college issued, primary-user&nbsp;Mac computers. This method of deployment replaces&nbsp;the need for a staff member of ITS to prepare computers before they are deployed to the client. With Zero-Touch, a computer can be delivered directly to a client without ever needing to be physically handeled by ITS.
 
Zero-Touch deployment is a new method for provisioning college issued, primary-user&nbsp;Mac computers. This method of deployment replaces&nbsp;the need for a staff member of ITS to prepare computers before they are deployed to the client. With Zero-Touch, a computer can be delivered directly to a client without ever needing to be physically handeled by ITS.
  
'''<span style="font-size:larger;">How does it work?</span>'''
+
=== '''<span style="font-size:larger">How does it work?</span>''' ===
  
 
Apple has a progam called Apple School Manager (ASM) which works in conjuction with any number of Mobile Device Management (MDM) systems. At Middlebury College, ITS uses an application called Jamf Pro for MDM. When computers are enrolled into Apple School Manager, they become assigned to Middlebury College's Jamf Pro server.
 
Apple has a progam called Apple School Manager (ASM) which works in conjuction with any number of Mobile Device Management (MDM) systems. At Middlebury College, ITS uses an application called Jamf Pro for MDM. When computers are enrolled into Apple School Manager, they become assigned to Middlebury College's Jamf Pro server.
Line 10: Line 10:
 
When&nbsp;a Mac is powered on for the first time and gets an Internet connection, the first thing it does is establish a connection&nbsp;to Apple servers. Apple then directs the computer to make a connection with Middlebury's Jamf Pro server and&nbsp;then enrolles&nbsp;itself into the Jamf Pro inventory. After enrollment is complete Jamf begins to push policies, profiles and software thereby configuring it automatically. Once Zero-Touch completes, a Self Service application will open on the desktop providing the client with many options to install as the user sees fit.
 
When&nbsp;a Mac is powered on for the first time and gets an Internet connection, the first thing it does is establish a connection&nbsp;to Apple servers. Apple then directs the computer to make a connection with Middlebury's Jamf Pro server and&nbsp;then enrolles&nbsp;itself into the Jamf Pro inventory. After enrollment is complete Jamf begins to push policies, profiles and software thereby configuring it automatically. Once Zero-Touch completes, a Self Service application will open on the desktop providing the client with many options to install as the user sees fit.
  
'''<span style="font-size:larger;">Deployment steps&nbsp;- off campus</span>'''
+
=== '''<span style="font-size:larger">Deployment steps&nbsp;- off campus</span>''' ===
  
 
#Power on the computer and join your home Internet; either by joining the Wifi or connecting directly to your modem/router with a network cable.  
 
#Power on the computer and join your home Internet; either by joining the Wifi or connecting directly to your modem/router with a network cable.  
Line 20: Line 20:
 
#Use the search box in the upper left corner of the Self Service window to search for desired items. Self Service provides installers for software, printers and information on how to get applications outside of Self Service (e. g. MS Office and Adobe applications).  
 
#Use the search box in the upper left corner of the Self Service window to search for desired items. Self Service provides installers for software, printers and information on how to get applications outside of Self Service (e. g. MS Office and Adobe applications).  
  
'''On-campus'''
+
=== '''On-campus''' ===
  
 
For now, Zero-Touch deployments performed on campus must be completed using a network cable. The Jamf Connect Login application is not compatible with&nbsp;802.1x Enterprise 2 wireless. MiddleburyCollege wifi will not be active at the Single Sign-on login window and will produce a network error if not connected to a live Ethernet jack.
 
For now, Zero-Touch deployments performed on campus must be completed using a network cable. The Jamf Connect Login application is not compatible with&nbsp;802.1x Enterprise 2 wireless. MiddleburyCollege wifi will not be active at the Single Sign-on login window and will produce a network error if not connected to a live Ethernet jack.
Line 29: Line 29:
  
 
Occasionally we have seen the home Wifi drop during the setup process. This results in the following error message:
 
Occasionally we have seen the home Wifi drop during the setup process. This results in the following error message:
<p style="text-align: center;">[[File:No Wifi.png|600x600px|No Wifi.png]]</p>   
+
<p style="text-align: center">[[File:No Wifi.png|600x600px|No Wifi.png]]</p>   
 
[[Category:Hardware]] [[Category:Hardware Distribution]] [[Category:Helpdesk Documentation]] [[Category:Public Search]]
 
[[Category:Hardware]] [[Category:Hardware Distribution]] [[Category:Helpdesk Documentation]] [[Category:Public Search]]

Revision as of 09:16, 16 April 2020

What is Zero-Touch?

Zero-Touch deployment is a new method for provisioning college issued, primary-user Mac computers. This method of deployment replaces the need for a staff member of ITS to prepare computers before they are deployed to the client. With Zero-Touch, a computer can be delivered directly to a client without ever needing to be physically handeled by ITS.

How does it work?

Apple has a progam called Apple School Manager (ASM) which works in conjuction with any number of Mobile Device Management (MDM) systems. At Middlebury College, ITS uses an application called Jamf Pro for MDM. When computers are enrolled into Apple School Manager, they become assigned to Middlebury College's Jamf Pro server.

When a Mac is powered on for the first time and gets an Internet connection, the first thing it does is establish a connection to Apple servers. Apple then directs the computer to make a connection with Middlebury's Jamf Pro server and then enrolles itself into the Jamf Pro inventory. After enrollment is complete Jamf begins to push policies, profiles and software thereby configuring it automatically. Once Zero-Touch completes, a Self Service application will open on the desktop providing the client with many options to install as the user sees fit.

Deployment steps - off campus

  1. Power on the computer and join your home Internet; either by joining the Wifi or connecting directly to your modem/router with a network cable.
  2. Turn on the Mac and step through the first couple of setup screens (turn on Location Services).
  3. Once the Single Sign-on login window appears, type your entire Middlebury email address and press Enter. On the next window, enter your password and press Enter. A third window will ask you to retype your password a second time.
  4. Once startup has completed wait to see a message that says the computer will reboot in one minute.
  5. After the reboot, click on the “Local Login” button. This will present you with a shorter way to log into your Mac. Just enter your username and password. Using the Local Login button bypasses the authentication process and logs you into your profile without needing an Internet connection.
  6. If Self Service isn’t already open, open it by navigating to Applications/Utilities and double clicking on Self Service.
  7. Use the search box in the upper left corner of the Self Service window to search for desired items. Self Service provides installers for software, printers and information on how to get applications outside of Self Service (e. g. MS Office and Adobe applications).

On-campus

For now, Zero-Touch deployments performed on campus must be completed using a network cable. The Jamf Connect Login application is not compatible with 802.1x Enterprise 2 wireless. MiddleburyCollege wifi will not be active at the Single Sign-on login window and will produce a network error if not connected to a live Ethernet jack.

 

Troubleshooting

Occasionally we have seen the home Wifi drop during the setup process. This results in the following error message:

No Wifi.png