macOS Management
Overview
Our macOS Management System is a system to remotely manage and service the collection of UAA owned Apple devices. This is done by remotely managing the software, updates, and operating system of UAA Apple computers. With this in place, IT will be able to provide better support and a more standardized work environment to make a more hassle free experience for customers.
Benefits
- Reliability: Your device will quickly receive software updates and patches with little to no interaction on your part.
- Time Efficiency: You will stay more productive as deployment and updating processes run in the background, freeing up more time for teaching and research.
- Flexibility: You can choose when and where to install new software or run maintenance on your device through Self-service portals.
- Security: IT Technicians will manage the security of your machine so you don't have to. You can rest assured that software patches, antivirus protection, and firewalls are well maintained.
- Confidentiality: Your data and files will remain confidential; no personal data is scanned, indexed, or transmitted off your device. CMT servers also keep full audit logs of any actions performed by technicians.
- Compliance: Your device will always be in compliance with federal laws governing requirements for research or student data on University computers.
Jamf Pro
Jamf Pro is the Software UAA is using for our macOS Management System. This is a system you can self enroll into with UAA owned Mac devices. It also has a UAA Software Portal that allows UAA employees access to relevant software and updates on UAA owned devices.
Note: Jamf Pro is only supported on OS version 10.11 or newer & Never Enroll Your Personal Devices.
Self-Service Enrollment Instructions (for University Owned Devices ONLY)
- Enrollment Instructions
The first thing to do is to check if the device is already enrolled in our existing Mobile Device Management(MDM) System.
Go to System Preferences and then see if there is a Profiles Applet. If there is, click on "Profiles". If not, then skip this section on removing the old profile and start adding the new device to our Jamf MDM.
If you have a profile called "UAA Jamf Profile", then you are already enrolled into Jamf. You can then proceed directly to the Software Center.
In the Profile applet, you will see a profile on the left-hand side that says Remote Management. Click on that profile to select it and click the "-" (minus sign) under the profile list. This will remove the existing Remote Management Profile. It will require you to enter your admin password to approve the removal of the profile.
Once you have removed the profile, open the browser of your choice(ex. safari, chrome,etc.) and go to
This will take you to the self-enrollment page of our Jamf MDM environment. Enter your UA credentials to continue, acknowledging that the device being enrolled is university owned. NEVER ENROLL A PERSONALLY OWNED DEVICE.
The next screen will have you download the profile and install our certificate profile.
The profile will download and then will open System Preferences and it will ask you if you want to install the profile. Click the install button.
After installation, go back to your browser and you will be progressed to the next page, which will ask you to repeat the same process, but with the new Remote Management Profile. This will enroll your computer into the Jamf MDM solution.
Once again, when the profile downloads, System Preferences will open and you will be prompted on if you want to install the Profile. Click the install button. It will then request you to enter your admin password for confirmation for the installation.
Once installed, the device is now enrolled into the new MDM solution and the browser will confirm it.
Once enrolled there are 2 commands that you can run through the terminal that will assist in registering and allowing Jamf to push applications and setting configurations to your device quicker. First, run the terminal and type "sudo jamf recon" and press enter. This will inventory the local machine and send that inventory to the Jamf server for processing. The second command is to type into the terminal "sudo jamf policy" and hit enter. This will process all the policies related to the newly enrolled device. You will then be good to go to the Software center and get the applications you are wanting installed onto your device.
Software Center Instructions
- Software Center
The Software Center allows UAA employees to access relevant software & updates on UAA owned computers. This also takes the place of the Designated IT Professional position, which is being retired May 8, 2019. If a user requires software that doesn't appear in the Software Center, their supervisor can contact the IT Technical Support Center to request permissions. This is done either via emailing uaa.techsupport@alaska.edu or calling (907) 786-4646 or toll-free at (877) 633-3888.
List of available software.To open the Software Center, search in either Finder or Spotlight "UAA Software Portal" and open the application. It will request that you log in with your UA credentials.
Once logged in you will be able to view and manage your UAA licensed applications. Simply click to install the relevant applications.
If you require software that isn't listed in your Software Center, that is listed on the list below, please have your supervisor contact IT to request the permissions for additional software.
Note: There may be some additional requirements for some software(ex. purchasing of lisences, contacting department head, etc.).
Available Software
- Applications Available for All Users
- Acrobat Reader DC
- Adobe Acrobat Pro XI
- Adobe Air
- Adobe Camera RAW plug-in
- Adobe DNG Converter
- Adobe Dreamweaver CS6
- Adobe Fireworks CS6
- Adobe Flash Player
- Adobe Flash Pro CS6
- Adobe Illustrator CS6
- Adobe InDesign CS6
- Adobe Photoshop CS6
- Adobe Premiere Pro CS6
- Adobe Shockwave Player
- Apple Configurator 2
- Audacity
- BBEdit
- Blackboard Collaborate Launcher
- Cisco Any Connect (VPN)
- Dockutil
- Fetch
- FileZilla
- Garage Band
- Google Chrome
- Google Earth Pro
- iMovie
- Java 8 update 201
- Java For OSX 2017-001
- K2Client
- Keynote
- Lab Stats
- LTspice IV
- Mactracker
- Microsoft Excel 2019
- Microsoft OneDrive
- Microsoft OneNote
- Microsoft Outlook 2019
- Microsoft PowerPoint 2019
- Microsoft Remote Desktop
- Microsoft Skype For Business
- Microsoft Teams
- Microsoft Word 2019
- Mozilla Firefox
- Mozilla Firefox ESR
- Numbers
- Opera
- Pages
- PlistBuddy
- R Statistics
- SketchUp Make
- Slack
- StatPlus
- TestGen Plug-in
- VLC
- VUE
- Xcode
- XQuartz
- Applications Requiring Licensing
- Compressor
- Final Cut Pro
- Logic Pro X
- Motion
- IBM SPSS
Frequently Asked Questions
-
What is Jamf Pro?
Jamf Pro, developed by Jamf, is a comprehensive management system for Apple macOS computers and iOS devices. With Jamf Pro, IT Technicians proactively manage the entire lifecycle of all Apple devices. This includes deploying and maintaining software, responding to security threats, distributing settings, and analyzing inventory data.
If you would like to learn more about Jamf Pro, please visit
-
What benefits does a client receive from Jamf Pro?
- Reliability: Your device will quickly receive software updates and patches with little to no interaction on your part.
- Time Efficiency: You will stay more productive as deployment and updating processes run in the background, freeing up more time for teaching and research.
- Flexibility: You can choose when and where to install new software or run maintenance on your device through Self-service portals.
- Security: IT Technicians will manage the security of your machine so you don't have to. You can rest assured that software patches, antivirus protection, and firewalls are well maintained.
- Confidentiality: Your data and files will remain confidential; no personal data is scanned, indexed, or transmitted off your device. CMT servers also keep full audit logs of any actions performed by technicians.
- Compliance: Your device will always be in compliance with federal laws governing requirements for research or student data on University computers.
-
How does Jamf Pro work?
Jamf Pro consists of a management server cluster, known as the JAMF Software Server (JSS), a small software utility known as an "agent" on enrolled macOS computers, and a Mobile Device Management (MDM) profile on enrolled macOS and iOS devices.
The agent on a macOS client checks in with the JSS at computer start up and every 15 minutes thereafter, consuming 2KB of network traffic, 4MB Real Memory, and 0.10% CPU. In addition, computer inventory is uploaded to the JSS once a day, causing less than 200KB of network traffic, 8MB Real Memory, and 3.74% CPU. On average the inventory process takes 30 seconds to complete.
An iOS client checks in with the JSS once a day, or on request by a Jamf Pro Technician.
All client/server communication is encrypted by a certificate pair configured when the agent/profile is installed.
-
What information does Jamf Pro collect?
The UAA implementation of Jamf Pro has been customized to collect only the data needed to support macOS computers and iOS devices. This information includes:
- Hardware Specifications
- Installed Applications & Usage
- Services Running
- Available Software Updates
- Local User Accounts and Login/Logout Timestamps
- Security Status (Firewall, SSH, etc)
- Connected Peripheral Devices
No personal information is collected, such as the contents or names of personal files (documents, email, etc) or any browsing history.
-
What devices does Jamf Pro support?
Generally, Jamf Pro can support OS X 10.11 or later and iOS 9 or later. For more information, please see .
-
Is my device enrolled in Jamf Pro?
To find out if your UAA-issued device is enrolled, look for the Self Service application (or UAA Software Portal), which is automatically installed when your device is enrolled. On macOS, Self Service is located in the Applications folder or on the Dock. On iOS, the Self Service app is located on the home screen.
-
What is Self Service?
The Self Service application is similar to the Apple App Store, but it provides customized content for University devices. This content includes access to software, printers, maintenance tasks, links, and other documentation. The Self Service app gives clients the flexibility of choosing what to install and when to install it.
The Self Service app is managed and maintained by UAA ITS. If you would like to see something added, please contact the UAA Technical Support Center.
-
Can I connect to Self Service when I am off-campus?
Yes, Self Service will function when you are off of the University of Nebraska network. Depending on the speed of your network connection it may take longer for tasks to complete.
-
What changes does Jamf Pro make to a Mac?
- Jamf Pro installs the Self Service application in the Applications folder of a Mac. Content such as software, printers, maintenance tasks, links, and other documentation are provided within Self Service.
- A service account will be created on the Mac with administrative privileges to carry out tasks from the JSS. This account is hidden from the general user interface and no human knows the password to this account. The service account password is maintained and randomized by the JSS at regular intervals. SSH will be turned on and access will be restricted to the service account.
- For OS X 10.9 and later, a Mobile Device Management (MDM) profile will be installed. This profile allows Jamf Pro administrators to remotely configure settings on the Mac. Basic security settings will be set at enrollment to ensure compliance with UAA policies.
-
What changes does Jamf Pro make to an iOS device?
- Jamf Pro installs the Self Service app on the home screen of your University-issued iOS device. Access to content such as apps, configurations, links, and other documentation is provided within Self Service.
- A Mobile Device Management (MDM) profile will be installed at enrollment. This profile allows IT Technicians to remotely configure settings. Basic security settings will be set at enrollment to ensure compliance with UAA policies.
-
How will software be installed on my computer?
Most software installations will be initiated by clients through the Self Service application. Your IT support group may also push software as needed/requested. ITS UAA will not distribute software unless requested to do so by the client or department IT staff.
-
Who has access to my computer?
Select members of your IT support group have the ability to manage your UAA-issued Apple device with Jamf Pro. ITS UAA Jamf Pro Administrators also have campus-wide access.
-
Can I request software not on this list?
Yes... If there is software that you'd like to have on your device, please contact the Technical Support Center. We urge people to not install through the App store under their personal Apple ID's, but let us see if we can get it through our purchase program. This will allow us to manage the application and any potential licenses that come with it.
-
Will I still have Administrative access to my Mac?
There will be no automatic changes to the privileges of your user account by enrolling in Jamf Pro. Your IT support group will contact you if changes are to be made.
Need additional help or have issues
For additional assistance contact the IT Services Technical Support Center via phone at (907) 786-4646, toll-free at (877) 633-3888, or email at uaa.techsupport@alaska.edu.