As Enterprise businesses increasingly adopt the Mac OS platform, security and regulatory compliance are becoming important focuses for IT Administrators. Customers across the Commercial, Education and Government sectors are experiencing increased pressure to demonstrate compliance with an array of regulations which may include the U.S. Government Configuration Baseline (USGCB), Payment Card Industry Data Security Standards (PCI DSS) and Sarbanes-Oxley Act (SOX).
This guide is designed for Casper Suite administrators who plan to use Sophos SafeGuard® Disk Encryption for Mac. This guide provides step-by-step instructions for deploying, activating, and reporting on SafeGuard with the Casper Suite. Be sure to review the information in the "Requirements" section before you begin.
Extension attributes are custom fields that allow you to collect almost any piece of attribute data from a computer.
Find out more about extension attributes on the extension attributes page.
This attribute returns the Disk Encryption Percentage for Sophos SafeGuard on the boot disk. This attribute template applies to Sophos SafeGuard (v 5.49.00).
SafeGuard - Encryption Percentage.xml (853 B)
This attribute returns the Disk Encryption Status for Sophos SafeGuard on the boot disk. This extension attribute will return "Encrypted" when the drive is fully encrypted. This attribute template applies to Sophos SafeGuard (v 5.49.00).
SafeGuard - Encryption Status.xml (911 B)
Package manifests allow Composer to build packages from software that is already installed without taking snapshots.
Find out more about package manifests on the package manifests page.
Licensed software records in Jamf Pro let you store information about the software licensed to your organization.
Find out more about licensed software templates on the licensed software templates page.
Scripts can be executed on managed computers using a Policy or Jamf Remote. Most scripts also work with other management tools.
Find out more about scripts on the scripts page.
This is to be used with Sophos SafeGuard. This will create a SGN POA account and recovery accounts (making sure there is always 5 recovery account) for the logged on user. Recovery accounts can be recorded thrugh an extension attribute to the JSS. This Script can be used for a logging in policy or if required through other means as root user.
poaRecoverySophosSafeGuard.sh (4.07 KB)
This script will create a SafeGuard user, and will begin the encrypting a specified drive. Please note that this script was created using the latest version of Sophos SafeGuard available at the time of the script creation (05.49.00). Compatibility with versions of Sophos SafeGuard created prior to and post 05.49.00 is unknown at this time.
activateSophosSafeGuard.sh (6.80 KB)
Managed Preference (MCX) manifests allow you to enforce settings on managed computers with Jamf Pro. These files also work with Workgroup Manager.
Find out more about managed preference manifests on the managed preference manifests page.