Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Using "Configautomation" To Wipe Checkout iOS Devices and Deploy Standard Staff Config

9d350fa2294e1192f8f12b0ebf1a1d8b?s=47 Jamf
October 23, 2018

Using "Configautomation" To Wipe Checkout iOS Devices and Deploy Standard Staff Config

Presentation from JNUC 2018, the world's largest rally of Apple IT administrators.

Using "Configautomation" To Wipe Checkout iOS Devices and Deploy Standard Staff Config

Presented by:
Christopher Sweet, Iowa State University

View all session slides, recordings and more at https://www.jamf.com/events/jamf-nation-user-conference/2018/.



October 23, 2018

More Decks by Jamf

Other Decks in Technology


  1. None
  2. © JAMF Software, LLC Christopher Sweet Systems Support Specialist III

    Iowa State University Parks Library
  3. © JAMF Software, LLC Using Configautomation To Wipe Checkout iOS

    Devices and Deploy Standard Staff Config Presentation agenda: Obtain necessary software Create certificate and key Create workflow Demonstrate workflow
  4. © JAMF Software, LLC Problem • An easy way to

    check out iPads to patrons and wipe device when returned Solution • Resetting and managing the iPads via a Mac mini, workflows, commands, Apple Business Manager/Apple School Manager, VPP and Jamf Pro Server
  5. © JAMF Software, LLC Risks • Unwanted access to personal

    data if a patron fails to delete cookies, clear caches, sign out their Apple ID, remove Apps, Movies and Music
  6. © JAMF Software, LLC Process and success • Configautomation: Sal

    Soghoian http:// www.configautomation.com • Trial and error, started with 10 iPads a year ago, now checking out 40 iPads
  7. © JAMF Software, LLC How I ended up here on

    stage • This is my 6th JNUC • Not much being said about Configautomation • Figured I would evangelize the process • Process works great for checkout scenarios & initial setup for deployment!
  8. © JAMF Software, LLC Requirements • A machine running macOS

    and Apple Configurator 2 • USB hub if doing multiple devices at once • Zip files from http://www.configautomation.com • Jamf Pro Server • Apple Business Manager/Apple School Manager enrolled devices
  9. © JAMF Software, LLC Software downloads • Apple Configurator 2

    • “Attached” Workflow Installer (https:// configautomation.com/attach-actions- installer.zip) • Action to access Apple Business Manager/ Apple School Manager (https:// configautomation.com/DepSPCInstaller.zip)
  10. © JAMF Software, LLC Automation Tools Install the automation tools

    from Apple Configurator 2 located in the File menu
  11. © JAMF Software, LLC

  12. © JAMF Software, LLC Create Certificate and Private Key •

    Apple Configurator 2 menu, Preferences • “+” then fill out fields • Gear, Export Supervision Identity Use Apple Configurator 2 (AC2)
  13. © JAMF Software, LLC

  14. © JAMF Software, LLC Prepare Automated Enrollment Wi-Fi Profile •

    Apple Configurator 2, File, New Profile, Wi-Fi • Under Wi-Fi, Enter SSID
  15. © JAMF Software, LLC

  16. © JAMF Software, LLC Workflow to Wipe Devices • Open

    file attachment-workflow.workflow (located?) • Remove steps between “Begin Attached Workflow” and “End Attached Workflow” • Add “Erase Devices” • Add “Prepare Devices using Automated Enrollment”
  17. © JAMF Software, LLC Configure Erase and Prepare actions •

    .crt is the Certificate • .der is the private key Preparing Erase Devices action Preparing the Prepare action • Select the already created Wi-Fi profile
  18. © JAMF Software, LLC

  19. © JAMF Software, LLC auto-attachment command • attachment-workflow.workflow path should

    be set to ~/Library/Workflows/ attachment-workflow.workflow) Visually verify to double-check
  20. © JAMF Software, LLC Running the workflow • Launch Terminal.app

    • Go to the Script Menu, Select Activate Chosen Attachment Command • Go to “~/Library/Workflows” and select the auto-attachment.command Terminal
  21. © JAMF Software, LLC

  22. © JAMF Software, LLC iPad view

  23. © JAMF Software, LLC Synopsis • Get and install tools

    and files • Create files for actions • Edit workflow • Launch command • Plug in devices
  24. © JAMF Software, LLC Gotcha’s and Showstoppers • iTunes auto-sync

    • Computer Trust relationship • Sign-out of AppleID (MFA) • Skip setup steps checked in Jamf Pro Server Gotcha’s
  25. © JAMF Software, LLC Caveats • Indiscriminate Process • iOS

    Upgrades • macOS Upgrades
  26. © JAMF Software, LLC Caveats • Will wipe whatever iOS

    device is plugged into the USB hub • Cycling power on hub • Plugging/relaunching script Indescriminate
  27. © JAMF Software, LLC Caveats • Don’t upgrade the iOS

    past version supported by your Jamf Pro Server • Can result in unskippable screens iOS Upgrades
  28. © JAMF Software, LLC Caveats • Major macOS upgrades can

    result in AC2 automation tools needing to be reinstalled • Test after upgrading macOS upgrades
  29. © JAMF Software, LLC Additional Use-case scenarios • Not only

    for checkout • Prep-work for staff deployment iOS devices • Launch command script, plug-in, disconnect, done!
  30. © JAMF Software, LLC One last thing Check out Sal

    Soghoian’s session about Automator • Wednesday, Oct. 24 at 11:15 AM - 12:00 PM • Greenway Ballroom
  31. © JAMF Software, LL THANK YOU!