Extension attributes are custom fields that allow you to collect almost any piece of attribute data from a computer.
Find out more about extension attributes on the extension attributes page.
This EA will allow you to view the password of an external volume that gets encrypted on the enrolled computer. The password is encoded with base64 and then uploaded to the JSS (using the Encrypt External Volume.sh Script) along with the date it was encrypted and the username of the user who encrypted it. To decode the password, you can do the following: `echo "passwordhere" | base64 -D`
EA_EncryptedVolumePassword.sh (1.45 KB)
This EA will find the status of the Smart Card Pairing UI and display it in the section you select.
EA_SmartCardPairing.sh (1.61 KB)
Package manifests allow Composer to build packages from software that is already installed without taking snapshots.
Find out more about package manifests on the package manifests page.
Licensed software records in Jamf Pro let you store information about the software licensed to your organization.
Find out more about licensed software templates on the licensed software templates page.
Scripts can be executed on managed computers using a Policy or Jamf Remote. Most scripts also work with other management tools.
Find out more about scripts on the scripts page.
This is an update to the original Apple Software Update Search that was uploaded July 2017. It has been rewritten to allow for multiple improvements and new features. Version 2.0 Update (Feb 2018) - Added support for multiple updates to used in the script parameters (current limit is 4, version 1.0 only supported one item at a time) - Rewrote the way updates are handled. Now any update that is found gets added to an array then is downloaded to the default location (/Library/Updates/). Once the update is finished downloading, it gets added to another array which is then used to install each update after they all have been downloaded. - Added a section that will check to see if the update requires a restart. If it's required, it will set the "restartRequired" variable to yes. Once all updates have been downloaded and installed, a if statement checks the restart variable and will trigger a policy setup for an delayed authenticated reboot. **NOTE: A policy will have to be created with a matching trigger in order for this feature to work.** This section currently only looks for the "security" label. - Added a manual inventory update before the restartRequired check to ensure any installed updates are succesfully reflected in the Jamf Pro Server. (This was written in to work around an issue where inventory updates would fail if the update name exceeded a certain amount of characters.)
Apple_Software_Update_Search_v2.sh (6.80 KB)
This was created as a solution for the "Allow Smart Card Pairing" option in the SmartCard Configuration Profile payload not working and allowing the user to pair their Smart Card after the profile was installed. Since the sc_auth command cannot be ran as root, this script will pull the username of the current user and run the command to disable the pairing UI as each user at login (or whenever the trigger is set to run) I have also created an Extension Attribute to pull the status of the Smart Card Pairing UI which can be used for a smart group or scoping.
DisableSmartCardPairing.sh (1.41 KB)
This script can be used to encrypt an external volume. The script will make any changes that are needed to the partition map and then prompt the user to create a password for the external volume (Current requirements for the password is 7 characters or longer, this can be changed and uses AppleScript to capture the input). The script will also allow the user to rename the external volume, erase it and re-encrypt it again, or change the password (NOTE: The user must know the current volume password in order for this function to work). The script also has a section that will encode the passcode and upload it to the JSS to be used in the future if the user forgets their password or access to the external volume is needed. Note: This feature requires an Extension Attribute to be created in the JSS in order for the password to be accessible inside the JSS
EncryptExternalVolume.sh (17.8 KB)
This script will find the boot volume using the bless command and then get the current volume name for the boot volume using the diskutil command. It will then find the short version of macOS the computer has installed. The reason for this script is so that the startup volume names are uniformed based off of the macOS version they have installed. The variable "newName" is then assigned a string based off of the macOS version installed. This variable is then compaired to the current volume name. If the names do not match, it will automatically rename the startup volume to the correct name.
RenameStartupVolume.sh (2.39 KB)
Managed Preference (MCX) manifests allow you to enforce settings on managed computers with Jamf Pro. These files also work with Workgroup Manager.
Find out more about managed preference manifests on the managed preference manifests page.