No content

© JAMF Software, LLC Joseph Jenkins Systems Programmer/Analyst North Carolina State University Libraries Lisa Davies Senior Engineer 275x275 head shot 275x275 head shot 

Your logo here 275 x 100 max © JAMF Software, LLC Intro to Custom Trigger Policies What are they? What do they do? How can they be used? Why use them? 

Your logo here 275 x 100 max © JAMF Software, LLC Triggers • Startup, Login or Logout • Network State Change • Enrollment Complete • Recurring Check-in • Custom Policy execution events 

Your logo here 275 x 100 max © JAMF Software, LLC What are they? • Unique event name • Can have multiple policies per event Ability to call a policy with custom event name 

Your logo here 275 x 100 max © JAMF Software, LLC Example - Erase & re-install macOS • User - Self re-install macOS • Technician - Prepare to re-provision Use Case 

Your logo here 275 x 100 max © JAMF Software, LLC Example - Erase & re-install macOS • Self Service • User or tech erase and install Mac OS Requirements Success • DEP setup after re-install 

Your logo here 275 x 100 max © JAMF Software, LLC Example - Erase & re-install macOS • Check for existing installer • Cache the installer • Validate cache health • Begin the erase install Basic steps 

Your logo here 275 x 100 max © JAMF Software, LLC Algorithm Start Cache installer Validate cache Check for app End Begin install Present? Healthy? Delete app Show error Y Y N N 

Your logo here 275 x 100 max © JAMF Software, LLC Implementation • 1 Smart Group • 3 Policies Piecing it together 

Your logo here 275 x 100 max © JAMF Software, LLC Smart Group • Operating System like 10.13 • AND • More than 15 GB free space Criteria for self service policy scope 

Your logo here 275 x 100 max © JAMF Software, LLC Policies • Script payload to call custom triggers Policy 1 - Self Service Policy 2 - Custom trigger - cacheHS • Cache package • Verify cache health Policy 3 - Custom trigger - installHS • Install cached package • Begin the erase and install 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 1 - Code - Check for app #!/usr/bin/perl use strict; use warnings; my $appfilepath = "/Applications/Install macOS High Sierra.app"; my $cachefilepath = "/Library/Application Support/JAMF/Waiting Room/Install macOS High Sierra.dmg”; # If Applications file already exists remove it if (-e "$appfilepath") { printf "Install app already exists - removing\n"; system "rm -rf \"$appfilepath\""; } 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 1 - Code - Cache Installer # Execute custom trigger policy to cache the installer #Policy Caches package #Validates package checksum with after script priority printf "Caching the Installer\n"; system "jamf policy -event cacheHS"; 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 1 - Code - Validate Cache #If the cache file is missing exit - as it failed to cache unless (-e "$cachefilepath") { printf "no cache - exiting\n"; #show popup message there is no cache system "jamf displayMessage \"Unable to cache OS files.\""; exit 0; } 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 1 - Code - Begin Install # Begin Erase & Install #Policy installs cached package #Policy executes install command printf "Beginning the install\n"; system "jamf policy -event installHS"; exit 0; 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 2 - Payload Cache package After priority script to checksum cache 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 2 - Code - Checksum Cached File #!/usr/bin/perl use warnings; use strict; my $file = $ARGV[3]; my $hash = $ARGV[4]; unless ($file =~ /a-zA-Z/) { exit; } unless ($hash =~ /a-zA-Z/) { exit; } my $command = "shasum -a 512 $file | cut -d ' ' -f 1"; my $downloadhash = `$command`; chomp $downloadhash; unless ("$hash" eq "$downloadhash") { printf "hash doesn't match - removing file.\n"; unlink $file; } 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 2 - Checksum Cached File Pass arguments to script 

Your logo here 275 x 100 max © JAMF Software, LLC Policy 3 - Payload /Applications/Install\ macOS\ High\ Sierra.app/ Contents/Resources/startosinstall --eraseinstall --agreetolicense --nointeraction & Install cached package Runs install command 

Your logo here 275 x 100 max © JAMF Software, LLC Custom Trigger Software Install • Install at enrollment • Install from Terminal • Install from script • Install from another policy 

© JAMF Software, LLC Enrollment Policy with Custom Triggers One enrollment policy to rule them all… • Customized installations based on defined parameters like hardware type • Set specific defaults and settings first • Then call software installs 

© JAMF Software, LLC Max image dimensions Enrollment Policy with Custom Triggers Software installs in specific order • Software installs are clustered into Config policies • There is policy inheritance between related software “stacks” • Computer name determines the software stack. 

© JAMF Software, LLC Enrollment Policy with Custom Triggers Software stacks • Software installs are clustered into Config policies • There is policy inheritance between related software “stacks” • Computer name determines the software stack. 

© JAMF Software, LLC Max image dimensions Enrollment Policy with Custom Triggers Verifying Installs • Checks for pre-defined path of app • If it exists, report success. • If it doesn’t exist, try again. • If it fails again, report critical failure. 

© JAMF Software, LLC Enrollment Policy with Custom Triggers Verify Policy Variables • Define the path to check • Give the application name • Give the application install command for failed installs 

© JAMF Software, LLC Max image dimensions Call a custom trigger via the Terminal: sudo jamf policy -trigger TriggerName Enrollment Policy with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Enrollment Policy with Custom Triggers Calling a custom trigger from another policy 

Your logo here 275 x 100 max © JAMF Software, LLC Enrollment Policy with Custom Triggers Calling a custom trigger from another policy 

Your logo here 275 x 100 max © JAMF Software, LLC Demo 

© JAMF Software, LLC 

© JAMF Software, LLC Building Software Update Policies Use a single script with JSS GUI variables for applications Build a template policy Copy software deployment stack script and replace install triggers with software update triggers Schedule software update policy run times. Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Application Software Update Script Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Application Software Update Policy Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Software Update Device Type Check Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Software Stack Update List Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Primary Software Update Policy Software Updates with Custom Triggers 

Your logo here 275 x 100 max © JAMF Software, LLC Demo 

© JAMF Software, LLC 

Your logo here 275 x 100 max © JAMF Software, LLC Links of interest All scripts and process documentation in this presentation may be found at: https://www.jamf.com/jamf-nation/discussions/ 29146/scripts-for-use-with-custom-trigger- policies 

Your logo here 275 x 100 max © JAMF Software, LLC Questions? 

© JAMF Software, LL THANK YOU!