Casper Suite Administrator's Guide Version 9.92 JAMF Software, LLC Centrify is a registered trademark of Centrify © 2016 JAMF Software, LLC. All rights reserved. Corporation in the United States and/or other countries. JAMF Software has made all efforts to ensure that this guide is accurate. Cisco and IOS are trademarks or registered trademarks of Cisco in the United States and JAMF Software other countries. 100 Washington Ave S Suite 1100 Minneapolis, MN 55401-2155 Divide is a trademark or registered trademark (612) 605-6625 of Divide, Inc.   Firefox is a registered trademark of the Mozilla Under the copyright laws, this publication may Foundation. not be copied, in whole or in part, without the written consent of JAMF Software, LLC. eDirectory is a trademark of Novell, Inc. in the United States and other countries. Active Directory and Windows are either registered trademarks or trademarks of Likewise is a trademark of Likewise Software. Microsoft Corporation in the United States Linux is a registered trademark of Linus and/or other countries. Torvalds in the United States and other ADmitMac is a registered trademark of countries. Thursby Software Systems, Inc. Java and MySQL are registered trademarks of Adobe and Adobe Creative Suite are Oracle and/or its affiliates. Other names may trademarks of Adobe Systems Incorporated. be trademarks of their respective owners. Android, Chrome, Google, and Google Play Tomcat is a trademark of the Apache Software are trademarks or registered trademarks of Foundation. Google Inc. All other product and service names Apple, the Apple logo, Apple Configurator 2, mentioned are the trademarks of their Apple Remote Desktop, Apple TV, AirPlay, respective companies. Finder, FileVault, FireWire, iBeacon, iBooks, iPad, iPhone, iPod touch, iTunes, Keychain, Mac, MacBook, MacBook Pro, MacBook Air, OS X, and Safari are trademarks of Apple Inc., registered in the United States and other countries. Apple Care, App Store, iBooks Store, iCloud, and iTunes Store are service marks of Apple Inc., registered in the United States and other countries. The CASPER SUITE®, COMPOSER®, the COMPOSER Logo®, JAMF SOFTWARE®, the JAMF SOFTWARE Logo®, RECON®, and the RECON Logo® are registered or common law trademarks of JAMF SOFTWARE, LLC in the U.S. and other countries. Contents Contents 13 Preface 14 About This Guide 15 Additional Resources 16 Overview of Technologies 17 Applications and Utilities 17 Casper Admin 17 Casper Focus 17 Casper Imaging 17 Casper Remote 18 Composer 18 jamf agent 18 jamf binary 18 JAMF Helper 18 JAMF Software Server 19 JDS Installers 19 Management Action 19 Recon 19 Recon.exe 19 Self Service for OS X 20 Self Service for iOS 20 Self Service Mobile for Android 21 Ports 24 Security 24 Passwords 24 Communication Protocols 25 Public Key Infrastructure 26 Signed Applications 27 Requirements 27 JAMF Software Server 28 Package Building 28 Inventory 29 Imaging 29 Remote Management 30 Self Service 30 Managing Mobile Devices 30 Casper Focus 31 Self Service Mobile 31 JDS Installer for Mac 31 JDS Installer for Linux 32 Computer Management Capabilities 3 32 Computer Management Capabilities 32 Management Capabilities for Computers 35 Mobile Device Management Capabilities 35 Management Capabilities for Institutionally Owned Devices 39 Management Capabilities for Personally Owned Devices 42 Before You Begin 43 Setting Up the JSS 44 Viewing the JSS on Different Types of Devices 44 Computer Display 45 Tablet Display 46 Smartphone and iPod touch Display 47 The JSS Dashboard 48 Adding Items to the JSS Dashboard 49 JSS Objects 49 Cloning a JSS Object 49 Editing a JSS Object 49 Deleting a JSS Object 50 Viewing the History of a JSS Object 51 JSS System Settings 52 JSS User Accounts and Groups 52 Requirements 52 Creating a JSS User Group 53 Creating a JSS User Account 54 Configuring Account Preferences 54 Configuring the Password Policy 55 Unlocking a JSS User Account 55 Cloning, Editing, or Deleting a JSS User Account or Group 56 Related Information 57 Integrating with LDAP Directory Services 57 Adding an LDAP Server Using the LDAP Server Assistant 58 Manually Adding an LDAP Server 58 Testing LDAP Attribute Mappings 59 Cloning, Editing, or Deleting an LDAP Server 59 Related Information 61 Integrating with an SMTP Server 61 Configuring the SMTP Server Settings 61 Testing the SMTP Server Settings 62 Related Information 63 Email Notifications 63 Requirements 64 Enabling Email Notifications 65 Activation Code 65 Updating the Activation Code 66 Change Management 4 66 Change Management 66 Requirements 66 Configuring the Change Management Settings 67 Viewing Change Management Logs in the JSS 67 Related Information 68 SSL Certificate 68 Requirements 68 Creating or Uploading an SSL Certificate 68 Related Information 69 Flushing Logs 69 Scheduling Log Flushing 70 Manually Flushing Logs 70 Related Information 71 Maintenance Pages 72 Creating a Maintenance Page Configuration 72 Cloning, Editing, or Deleting a Maintenance Page Configuration 73 JSS Summary 73 Requirements 74 Viewing the JSS Summary 74 Sending the JSS Summary to JAMF Software 74 Related Information 75 JSS Health Check Page 75 Using the JSS Health Check Page 76 Global Management Settings 77 Push Certificates 77 Requirements 77 Creating a Push Certificate 78 Uploading a Push Certificate (.p12) 78 Renewing the Push Certificate 79 Deleting the Push Certificate 79 Related Information 80 JAMF Push Proxy 80 Requirements 80 Requesting and Uploading a Proxy Server Token 80 Renewing the Proxy Server Token 81 Deleting the Proxy Server Token 81 Related Information 82 Integrating with GSX 82 Requirements 82 Configuring the GSX Connection Settings 83 Testing the GSX Connection 83 Renewing the Apple Certificate 84 Related Information 85 User-Initiated Enrollment Settings 5 86 Customizing the User-Initiated Enrollment Experience 87 Configuring the User-Initiated Enrollment Settings 88 Related Information 89 Integrating with the Device Enrollment Program 89 Requirements 89 Downloading a Public Key 90 Obtaining the Server Token File 90 Uploading the Server Token File to Configure an Instance of DEP 91 Refreshing DEP Instance Information 91 Editing or Deleting an Instance of DEP 92 Related Information 93 JSS URL 93 Viewing or Configuring the JSS URLs 93 Related Information 94 Public Key Infrastructure 94 Downloading the CA Certificate 95 Viewing or Revoking Certificates 95 Manually Creating a Certificate from a CSR 96 Creating a Backup of the CA Certificate 97 Integrating with an External CA 98 Related Information 99 Integrating with VPP 100 Requirements 100 Adding a VPP Account 100 Editing or Deleting a VPP Account 101 Related Information 102 Categories 102 Adding a Category to Casper Admin 102 Adding a Category to the JSS 103 Editing or Deleting a Category in Casper Admin 103 Cloning, Editing, or Deleting a Category in the JSS 103 Related Information 105 Event Logs 105 Requirements 105 Viewing Event Logs 106 Related Information 107 Server Infrastructure 108 About Distribution Points 110 Related Information 111 File Share Distribution Points 111 Adding a File Share Distribution Point 111 Cloning, Editing, or Deleting a File Share Distribution Point 112 Replicating Files to a File Share Distribution Point 112 Related Information 113 Cloud Distribution Point 6 113 Cloud Distribution Point 113 Requirements 114 Configuring the Cloud Distribution Point 114 Testing the Cloud Distribution Point 115 Replicating Files to the Cloud Distribution Point 115 Related Information 116 JAMF Distribution Server Instances 116 Requirements 117 Installing a JDS Instance on OS X 117 Installing a JDS Instance on Linux 118 Configuring a JDS Instance 118 Replicating Files to the Root JDS Instance 118 Viewing the Progress of File Replication 119 Viewing Inventory Information for a JDS Instance 120 Related Information 121 Software Update Servers 121 Adding a Software Update Server 121 Cloning, Editing, or Deleting a Software Update Server 122 Related Information 123 NetBoot Servers 123 Adding a NetBoot Server 123 Cloning, Editing, or Deleting a NetBoot Server 124 Related Information 125 Organizing Your Network 126 Buildings and Departments 126 Adding a Building or Department 126 Cloning, Editing, or Deleting a Building or Department 127 Related Information 128 Network Segments 128 Adding a Network Segment 128 Cloning, Editing, or Deleting a Network Segment 129 Related Information 130 iBeacon Regions 130 Requirements 131 Adding an iBeacon Region 131 Cloning, Editing, or Deleting an iBeacon Region 131 Related Information 133 Sites 133 Adding a Site 134 Cloning, Editing, or Deleting a Site 134 Adding Items to a Site 136 Related Information 137 Network Integration 137 Requirements 138 Adding a Network Integration Instance 7 138 Cloning, Editing, or Deleting a Network Integration Instance 139 Related Information 140 Scope 140 Configuring Scope 145 Managing Computers 146 Building the Framework for Managing Computers 146 Recurring Check-in Frequency 147 Startup Script 148 Login and Logout Hooks 149 Security Settings 151 Enrollment of Computers 151 About Computer Enrollment 153 User-Initiated Enrollment for Computers 156 User-Initiated Enrollment Experience for Computers 159 QuickAdd Packages Created Using Recon 162 Network Scanner 166 Remote Enrollment Using Recon 170 Local Enrollment Using Recon 173 Computer PreStage Enrollments 176 QuickAdd Packages Created Using Recon.exe 177 Local Enrollment Using Recon.exe 179 Composer 179 About Composer 180 Creating Package Sources 188 Package Manifests 191 Viewing and Editing the Contents of Package Sources 193 Adding Scripts to Package Sources 196 Editing PLIST Files in Package Sources 198 Localizations 201 Building Packages from Package Sources 203 Building OS Packages 205 Composer Preferences 210 Inventory for Computers 210 Computer Inventory Collection 211 Computer Inventory Collection Settings 215 Computer Extension Attributes 219 Computer Inventory Display Settings 220 Peripherals 223 Simple Computer Searches 226 Advanced Computer Searches 229 Computer Reports 231 Performing Mass Actions for Computers 237 Viewing and Editing Inventory Information for a Computer 244 Viewing Management Information for a Computer 249 Viewing the History for a Computer 256 Deleting a Computer from the JSS 8 257 Computer Groups 257 About Computer Groups 258 Smart Computer Groups 261 Static Computer Groups 263 Policies 263 About Policies 264 Managing Policies 267 Policy Payload Reference 271 User Interaction 273 Self Service for Computers 273 About Self Service for Computers 275 Installing Self Service on Computers 276 Self Service User Login Setting 277 Self Service Notifications Setting 278 Self Service Policies 280 Self Service Configuration Profiles for Computers 282 Self Service Plug-ins 284 Self Service User Experience on Computers 289 VPP Content Distribution for Computers 289 VPP-Managed Distribution for Computers 291 VPP Code Distribution for Computers 292 Simple VPP Content Searches for Computers 295 Advanced VPP Content Searches for Computers 298 VPP Content Reports for Computers 299 Software Distribution 299 Computer App Updates 301 Mac App Store Apps 306 Managing Packages 312 Managing OS X Installers 319 Administering Adobe CS3 and CS4 324 Installing Packages 328 Caching Packages 332 Installing Cached Packages 339 Uninstalling Packages 343 Patch Management 343 Running Software Update 347 Remote Control 347 Screen Sharing 349 Settings and Security Management 349 Managed Preferences 352 OS X Configuration Profiles 358 OS X Remote Commands 361 Managing Scripts 366 Running Scripts 370 Managing Printers 374 Administering Printers 9 378 Managing Dock Items 380 Administering Dock Items 384 Administering Local Accounts 388 Administering the Management Account 392 Managing Directory Bindings 394 Binding to Directory Services 398 Managing Disk Encryption Configurations 400 Deploying Disk Encryption Configurations 404 Issuing a New FileVault 2 Recovery Key 406 Administering Open Firmware/EFI Passwords 410 Imaging 410 About Imaging 411 Configurations 417 Booting Computers to NetBoot Images 421 Standard Imaging 424 PreStage Imaging 428 Autorun Imaging Settings 429 Autorun Imaging 435 Target Mode Imaging 439 Customizing the Imaging Process 442 Removable MAC Addresses 443 License Management 443 About Licensed Software 444 Licensed Software Records 448 License Compliance 449 Viewing License Usage 450 Application Usage for Licensed Software 451 Usage Management 451 Application Usage 453 Computer Usage 454 Restricted Software 456 Managing Mobile Devices 457 Enrollment of Mobile Devices 457 About Mobile Device Enrollment 459 Components Installed on Mobile Devices 460 User-Initiated Enrollment for Mobile Devices 463 User-Initiated Enrollment Experience for Mobile Devices 478 Apple Configurator Enrollment Settings 480 Supervision Identities 483 Enrollment Profiles 487 Mobile Device PreStage Enrollments 490 Inventory for Mobile Devices 490 Mobile Device Inventory Collection Settings 491 Mobile Device Extension Attributes 494 Mobile Device Inventory Display Settings 495 Simple Mobile Device Searches 10