AzureAD Single Sign On (SSO)

AzureAD Single Single On (SSO) is both an application (Company Portal.app) and a Configuration Profile applied to Jamf enrolled Macs for authentication purposes to DOI Azure Active Directory. Once applied, applications that rely on DOI Active Directory Federated Services should automatically authenticate with AzureAD SSO.

What’s the difference between AzureAD SSO and Apple Kerberos SSO?

Azure AD SSO …

Read More…

Apple Kerberos Single Sign On (SSO)

Apple Kerberos Single Single On (SSO) is a Configuration Profile applied to Jamf enrolled Macs for the purposes of Kerberos Ticket Granting Tokens (TGTs) used to authenticate the user to on-premise Active Directory resources. The user must be on VPN/on the DOI Network to get a Kerberos Ticket. When the user is on the network and a ticket needs to …

Read More…

Jump Client for macOS

User interaction is required to grant privacy permissions to the Jump Client application on macOS. When the application installs, a popup message will display asking the user to allow screen recording. If this is missed, the user will be re-prompted when a jump client session is initiated.

Click the Open System Preferences button.

Read More…

ePatching for macOS: New Deadline 11/14/2022 6PM Eastern

Apple Macintosh Logo

Subject:   [UPDATE 3] October 2022 ePatching for macOS – Begins 10/25/2022

UPDATE 3: Please distribute this information to your macOS Monterey end users.

To complete patching on macOS Monterey, user interaction is required. If no action is taken, updates will be enforced at the installation deadline: Monday, November 14th at 6PM EST. 

Users will be notified that updates are available with a popup like this:

Read More…

Shutdowns for DAR Non-Compliance Begin 10/17/2022

bitlocker_padlock

The final step in moving the USGS DAR encryption project into a compliance phase is to enable automatic shutdowns of non-compliant systems. Respecting the September Fiscal Year Closeout Activities, a decision was made to move the shutdown activities that were supposed to start on August 29, 2022, to Monday, October 17, 2022 providing additional time for sites to remediate non-compliant …

Read More…

September 2022 Patches for MacOS and Safari

Apple Macintosh Logo

Subject:   September 2022 ePatching for macOS – Begins 9/12/2022

WHEN IT WILL HAPPEN:   

 Fast Ring Testing Schedule:

  • Begins: Monday, September 12, 2022
  • Allowed Deferral Limit: 3 days from first notification 
  • Please send Fast Ring feedback using the Service Desk Form

Production Patching Schedule:

  • Begins: Thursday, September 15, 2022
  • Allowed Deferral Limit: 5 days from first notification

WHAT WILL HAPPEN:        ePatching Update Cycle for MacOS

Updates …

Read More…

Mac OS – In-place OS upgrade

The BUTST-supported method of upgrading macOS Ventura is the Jamf Self-Service Portal Method which does not require administrative privileges.

Pre-requisites before running the upgrade:

  • Must have at least 50GB of free space
  • Must be connected to the power supply

Note: The upgrade process will take about 45 minutes to an hour and a half. We …

Read More…

Mac OS – Bigfix Keyfile Creation

To create a Bigfix Keyfile on Mac, you will need to create a properly named, blank txt file in the BES Agent directory.

  • Open Terminal and su as admin
  • su usgs_laps

    2. cd into BES Agent

    cd /Library/Application\ Support/Bigfix/BES\ Agent

    3. Create a properly named txt file, in accordance with the DOI/USGS BigFix Keyfile guidance: Read More…