Jamf pro filevault mac os x#
Jamf pro filevault serial number#
Jamf pro filevault install#
Jamf pro filevault software#
Jamf pro filevault password#

Find the PayloadContent below PayloadCertificateFileName – it's the big, obvious block of certificate data. Open the de-signed profile originally downloaded from the Jamf Pro Server in your text editor. Change the values of PayloadOrganization and Location as needed. Plutil -convert xml1 /path/to/de-signed.mobileconfigĬopy the template-fde-recovery-key-escrow.mobileconfig included in this gist to a new file in your favorite text editor. In Terminal, run these commands: /usr/bin/security cms -D -i /path/to/downloaded/profile.mobileconfig -o /path/to/de-signed.mobileconfig

Next we'll convert the profile to a useable format. Save the profile, then click the 'Download' button.

Personal Recovery Key Encryption Certificate: Set to 'Automatically encrypt and decrypt recovery key.'.

Jamf pro filevault serial number#

By default it will be replaced with the device's serial number which will aid your technicians in recovering the correct key. Despite the help text, you should leave this blank. Device Key for Escrowed FileVault Recovery Key: Text displayed at the FileVault unlock screen when a user has apparently forgotten their password.We'll edit this elsewhere, so you can leave it blank. This is visible to the end-user, so 'My Company IT' or whatever is appropriate. Escrow Location Description: Describe where the recovery key is being shipped.Set the level to 'Computer level.' Make sure you do not add a scope to the profile we're not deploying it.Ĭlick the 'Security & Privacy' group, then click 'Configure.' Select the 'FileVault' tab. Name it something disposable – you'll delete it when done. You can use an Apple Developer certificate, or your Jamf Pro Server's CA (if self signed).Ĭreate a temporary configuration profile for doing this setup. You'll also need to sign your resultant configuration profile to prevent the Jamf Pro Server from manipulating its contents or preventing deployment. You can upload a custom profile to the Jamf Pro Server that manages only FDE Recover Key Escrow preferences, but it takes a little work.

Jamf pro filevault password#

You may inadvertently lock your users out of being able to make changes to the firewall, analytics settings, screen saver password requirement, etc. However, the settings reside in the 'Security & Privacy' grouping within the Jamf Pro GUI, forcing you to manage settings other than those related to recovery key escrow. The Jamf Pro GUI allows you to automatically set up the necessary payloads to manage the FDE Recovery Key Escrow process for macOS 10.13+. No personal information is collected, such as the contents or names of personal files (documents, email, etc) or any browsing history.How to manage ONLY FDE Recovery Key Escrow in Jamf Pro 9.101+

Local User Accounts and Login/Logout Timestamps.

Jamf Pro has been customized to collect only the data needed to support macOS computers and iOS devices.

Jamf pro filevault install#

You may install any application available to you.

Once the installation has completed, the Self Serve Portal will open.

Run the installer and follow the prompts for installation.

Click on this link to download the Arts Jamf Pro installer.

Here are the available applications and commands: Similar to the Apple app store, the Self Service Portal allows you to install applications and automated commands such as mounting a network drive with flexibility of choosing what and when to install.Īll applications and automated commands are managed and maintained by Arts ISIT, so you can rest assured that the application is safe to use. What can I do in the Self Service Portal? This process is extremely processor light and will not affect any performance on your computer.Īll client/server communication is encrypted by a certificate pair configured when the agent/profile is installed. The agent on the computer communicates with the JSS upon start up and checks in every 15mins for updates.

Jamf pro filevault software#

Jamf pro consists of a management server known as the JAMF Software server (JSS), an client agent installed on enrolled computers and a Mobile Device Management (MDM) profile.

Reliability: Your device will quickly receive software updates and patches with little to no interaction on your part.

Security: Be assured that the software you are installing are from a secure and safe source.

Flexibility: You can choose when and where to install new software or run maintenance on your device through Self-service portals.

What can benefits can Jamf Pro provide you? If you would like to learn more about Jamf Pro, please visit With Jamf Pro, IT technicians can proactively manage software, oversee inventory, software distribution, settings and security.

Jamf pro filevault mac os x#

Jamf Pro, developed by Jamf, is a platform for managing Mac OS X computers and iOS devices.