Automatically Re-issue Individual FileVault 2 Recovery Keys After Single Use...
One of the most requested features for the Casper Suite's FileVault 2 implementation is the ability to automatically re-issue individual recovery keys after a single use. The idea here is that once the...
View ArticleConfiguring Pound to use as a load balancer for the JSS
As a Mac deployment grows, eventually the JSS might become too overloaded for a single server to handle. When that happens, installing the JSS on multiple servers and load balancing between them...
View ArticleSecurity & Privacy Configuration Profile bug in Casper 9.82
Having recently updated my JSS to 9.82, I quickly noticed that my "Require password immediately after sleep or screen saver begins" setting was no longer being enforced. After some investigation, it...
View ArticleDEP fails in Casper when using a publicly trusted SSL certificate
If you're using a publicly trusted certificate with your JSS, you might have trouble with DEP enrollments failing with the ever so helpful error "Failed to contact Mobile Device Management server." But...
View ArticleHow I Deploy FileVault 2
Recently, a thread on JAMF Nation brought up a question of how to enable FileVault 2 in a touchless deployment while still giving IT access to unlock the disk. This is a major part of my agile...
View ArticleSetting up the JSS behind an Elastic Load Balancer in Amazon Web Services
Amazon Web Services' Elastic Load Balancers can offer a great combination of security, availability, and performance to your JSS deployment. Elastic Load Balancers aren't terribly difficult to set up,...
View ArticleRecovery Key Redirection Bug Can Cause Macs to Fail to Check In to JSS
I recently noticed that some of the Macs in my deployment have stopped running policies, even though they've been checking in regularly.
View ArticleTransmission OSX/Keydnap Malware Detection and Removal
In case you missed it, Transmission was infected with malware again. I've put together a Casper Extension Attribute to detect if Macs are affected, and a script to remove the files and app.
View ArticleUsing a Private Repository with Autopkg/Autopkgr
Out of the box Autopkg(r) doesn't support adding private GitHub repositories, however it is possible to get a private repo working well with Autopkg(r) with just a little extra setup. Here's how I did it.
View ArticleMacADUK Slides and Examples
Slides and example extension attributes from my talk at MacADUK 2017 are available in this blog post.
View Article