ZEN15-Managing Macintosh OS-X with Novell Zenworks Configuration Management 11.2 / Lecture

Managing Macintosh OS-X with Novell ZCM 11.2 Lecture

Novell Training Services www.novell.com ZEN15 ATT LIVE 2012 LAS VEGAS

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright © 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA 02451 U.S.A. www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page (http:// www.novell.com/documentation).

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

2 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

SECTION 1 Managing Macintosh OS X with ZENworks 11.2 Configuration Management3

Objective 1 Product Positioning of Mac Support in ZCM 11.2 5 Management Goals for OS X Support in ZCM 11.2 ...... 6 Identifying OS X Support Requirements ...... 7 Objective 2 Understanding OS X Management Features in ZCM 11.2 8 Defining the Capabilities of the MAC XPlat Agent...... 9 Installing the Mac XPlat Agent...... 11 Objective 3 Delivering Content to the Mac 19 Understanding Mac OS X Software Packages ...... 20 Configuring Mac Bundles ...... 22 Running Mac Bundles Using the Novell Application Launcher Window...... 25 Objective 4 Understanding the Future for Mac OS X in ZCM 27

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 1 To report suspected copying, please call 1-800-PIRATES.

Novell, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED. ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture

2 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

SECTION 1 Managing Macintosh OS X with ZENworks 11.2 Configuration Management

This course is a combination of lecture and demonstrations intended to provide you with a solid overview of how ZCM 11.2 provides centralized management and support for Apple Macintosh OS X devices. The features provided by ZCM 11.2 will give you the ability to manage your Apple OS X computers throughout your enterprise. The objectives for this session are:

1. “Product Positioning of Mac Support in ZCM 11.2” on page 5 2. “Understanding OS X Management Features in ZCM 11.2” on page 8

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 3 To report suspected copying, please call 1-800-PIRATES.

3. “Delivering Content to the Mac” on page 19 4. “Understanding the Future for Mac OS X in ZCM” on page 27

4 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Objective 1 Product Positioning of Mac Support in ZCM 11.2

The following topics are presented for this objective:

 “Management Goals for OS X Support in ZCM 11.2” on page 6

 “Identifying OS X Support Requirements” on page 7

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 5 To report suspected copying, please call 1-800-PIRATES.

Management Goals for OS X Support in ZCM 11.2

The main goal of the ZCM 11.2 release is to provide a consistent set of management capabilities across all platforms. All platforms supported by ZCM (Linux, Windows, and Mac) have at least the same capabilities of the Mac support in ZCM 11.2 In future releases, additional feature support will be added for the Mac OS X platform. ZENworks customers have been inquiring about Mac support for many releases. ZCM 11.2 provides Mac support that:

 is managed using the same ZENworks Control Center that manages Linux and Windows platforms

 is built into the core of the product without requiring additional licenses or product codes.

6 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Identifying OS X Support Requirements

The graphic above shows which versions of the OS X platform are supported in ZCM 11.2. Note that the server versions of OS X are not officially supported platforms. In order to install the ZENworks Adaptive Agent (XPlat version) on OS X platforms, Java version 1.6 must already be installed on the machine. The Leopard and Snow Leopard operating systems had Java already installed. However Lion does not. However, if you select Go > Utilities > Java Preferences from Finder’s menu bar, Java will automatically be downloaded and installed on the machine if the machine has an Internet connection.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 7 To report suspected copying, please call 1-800-PIRATES.

Objective 2 Understanding OS X Management Features in ZCM 11.2

The following topics are presented during this objective:

 “Defining the Capabilities of the MAC XPlat Agent” on page 9

 “Installing the Mac XPlat Agent” on page 11

8 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Defining the Capabilities of the MAC XPlat Agent

The version of the ZENworks Adaptive Agent (ZAA) that you install on OS X is based on the XPlat Agent code that is installed on Linux managed devices. This means the installer package can be downloaded from accessing the http:// /zenworks-setup URL in a browser. Just as in the versions of the ZAA that are installed on Windows and Linux platforms, the ZAA for OS X provides:

 Location awareness - used to determine the Mac machine’s closest server and can also be used as system requirements for Mac Bundles.

 Impersonation - Actions within Mac Bundles can be run as root if required; even though the locally logged-in user doesn’t have root access.

 Just as with Windows and Linux managed devices, the ZCC can be used to issue Quicktasks to Macs running the XPlat Agent. However with this release the following Quicktasks are not yet supported for the OS X platform:

 Launch Executable

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 9 To report suspected copying, please call 1-800-PIRATES.

 Launch Script

 Launch Java Executable

Other management capabilities native to the OS X XPlat Agent are shown in the graphic above. Currently a Mac managed device can not act as an Authentication or Imaging Satellite Server.

10 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Installing the Mac XPlat Agent

The Mac XPlat Agent can be installed in a traditional Linux fashion. This entails:

1. downloading the appropriate PreAgent Installation Package from a Primary Server’s zenworks-setup page, 2. using the chmod command at a Terminal Windows to assign the Execute Permission to the Package (thus making the Package executable) 3. running the PreAgent Installation Package. If you need to, you can run a command line utility to determine the machine’s architecture so that you know whether to download the 32 bit or 64 bit version of the PreAgent Installation Package. The command to determine the machine’s architecture is: sysctl hw.cpu64bit_capable

 the command will return hw.cpu64bit_capable: 1 if the machine is 64 bit

 the command will return 0 (or might even blow up) if the machine is 32 bit.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 11 To report suspected copying, please call 1-800-PIRATES.

The graphic above depicts the PreAgent Installer installing the 19 .pkg packages that comprise the XPlat Agent for the Mac. Once the installation has completed, and the user has logged out and then back in, the ZAA Icon will be shown in the upper right as depicted above.

12 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

However, many Mac users may not want or have the knowledge necessary to install the XPlat Agent from the Terminal window. In that case the ZCM Administrator can leverage Apple’s Xcode Integrated Developer’s Environment to create a .pkg installation package for the XPlat Agent. This would allow the user to simply double-click the icon for the packaged Agent installation from their desktop. Xcode is a free download from Apple and can be obtained from the URL shown above. This Xcode environment would only need to be installed on the Administrator’s Mac. The process of using the PackageMaker (a utility that is part of the Xcode IDE) to create a Mac installation package for the XPlat Agent, has been fully documented by ZENworks Product Management. This document is available from the ZENworks Cool Solutions web site using the URL shown above.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 13 To report suspected copying, please call 1-800-PIRATES.

An overview of the process for using Xcode’s PackageMaker to create a Mac Installer Package for the XPlat Adaptive Agent is shown below:

1. On the Administrator’s Mac, create a directory in your home directory such as / Users/username/ZENAgent 2. Download the PreAgentPkg_AgentMacComplete.bin from the %ZENWORKS_HOME%\install\downloads\setup_all\ directory on your Primary to your ZENAgent directory. 3. In your ZENAgent directory create a script named zenagent.sh. This script will contain the following two lines:

 #!/bin/sh

 /tmp/PreAgentPkg_AgentMacComplete.bin > /tmp/ zaainstall.log 4. From a Terminal window as root enter the following commands:

 chmod -R +rx /Users/username/ZENAgent

 chown -R root:admin /Users/username/ZENAgent

14 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

5. Use the following command to launch the PackageMaker from the Terminal prompt:

 open -a /Developer/Applications/Utilities/ PackageMaker.app This will display the PackageMaker application from the Xcode IDE as shown above. 6. Follow the configuration steps for using PackageMaker as shown in the document available at: http://www.novell.com/communities/node/13558/ building-mac-os-x-package-install-zenworks-112- adaptive-agent 7. This process will generate a ZENAgent.pkg file represented by an icon like that shown in the graphic below.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 15 To report suspected copying, please call 1-800-PIRATES.

Double-clicking the package’s icon will cause a standard Mac OS X installation for the ZENworks XPlat Agent to launch. The opening screen is shown in the graphic above.

16 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Once the ZENworks XPlat Agent is installed on a Mac OS X machine, the ZCM Administrator can build and assign Mac Bundles to the registered Mac machines in the zone. A Mac Bundle has Action Sets and Actions just like bundles for Windows and Linux devices. The available Actions that can be configured in a Mac Bundle are shown in the graphic above. Mac Bundles, like Windows and Linux Bundles can be pushed to devices by configuring schedules within the bundle or pulled by the user by double-clicking a bundle’s icon in the Novell Application Launcher Window.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 17 To report suspected copying, please call 1-800-PIRATES.

The other main capabilities provided by the ZENworks XPlat Agent for OS X are shown in the graphic above.

18 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Objective 3 Delivering Content to the Mac

This objective explains how OS X applications are packaged for the Mac’s OS X operating system and provides an example of how Mac Bundles are configured to deliver and launch applications on the Mac platform. The following topics are presented:

 “Understanding Mac OS X Software Packages” on page 20

 “Configuring Mac Bundles” on page 22

 “Running Mac Bundles Using the Novell Application Launcher Window” on page 25

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 19 To report suspected copying, please call 1-800-PIRATES.

Understanding Mac OS X Software Packages

Before discussing how to use ZCM 11.2 to deliver Mac Bundle content it is important to understand the various formats in which OS X application software is packaged for installation by a user.

 .pkg archive This type of package installer format appears to the user to be a single file with a .pkg extension. However, a .pkg file is actually a self-extracting installer package. The .pkg actually contains multiple files and directories. Typically in a .pkg the following files and directories exist:

 archive.bom - bom stands for Bill of Materials. This is a manifest file that describes everything that will be installed by the package and where it goes in the file system. The bom file can be read using the lsbom command line utility.

 archive.pax.gz - an archive file that contains all of the files mentioned in the bom file.

20 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

 Info.plist - this file is used by Finder and other OS X utilities to know how to properly handle the files contained within the pax.gz archive

 and a Resources directory. A .pkg package can be installed by using either the:

 GUI Installer Utility that is part of OS X

 or by using the following command line utility from a Terminal prompt: sudo installer –pkg mypackage.pkg –target /

 .mpkg archive This type of archive contains the meta-data and multiple .pkg archives within the single .mpkg archive

 .app These also appear as a single file to the user and are commonly referred to as Application Bundles (as opposed to ZCM Bundles). The .app “file” will typically contain directories named: Content, Resources, and Plugins Application packaged in this format typically are installed by simply dragging and dropping the .app file into a folder. In most cases the /Application folder is the target directory. After installing the .app to a target directory, the application can be launched by:

 clicking the application’s icon on the desktop

 or by issuing the following command from a Terminal prompt: open –a /Applications/filename.app

 .dmg This type of file is used very often to deliver application content and OS upgrades to Mac OS X devices over the Internet. dmg files are really disk-image files like the ISO files used in Windows and Linux platforms. However the .dmg image-file has built-in compression and checksum capabilities. Double-clicking on a dmg image file will cause OS X to mount the contents to the /Volumes directory on the Mac. Typically once the dmg is mounted by the OS you will see that it contains a .app file. The following command line utility can also be used to mount the dmg so its contents can be accessed:

 hdiutil attach package.dmg

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 21 To report suspected copying, please call 1-800-PIRATES.

Configuring Mac Bundles

Delivering OS X applications to Macintosh computers involves the configuring and assigning Mac Bundles to the Device Objects in the zone that represent the target machines. In the ZCM 11.2 release bundles may only be assigned directly or indirectly to device objects (folders of devices, device groups, or directly to a device object). Generally speaking, you will need to configure the following in the Mac Bundle:

 an Install Action to place the .app file in the /Applications folder

 and a Launch Action to run the .app file. You’ll need an example next.

22 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

In the Mac Bundle shown above, the Messenger.app file is placed into the / Applications folder on the target device using an Install Directory Action on the Install Action Set.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 23 To report suspected copying, please call 1-800-PIRATES.

To run the Messenger application, the Launch Action Set has a Launch Macintosh Executable Action. This action launches the open command located in the /usr/bin directory on the Mac managed drive. The parameters -a /Applications/Messenger.app are passed to the open command in order to launch the Novell Messenger application.

24 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Running Mac Bundles Using the Novell Application Launcher Window

Once the Mac Bundle has been configured and assigned to the Mac device, and the ZENworks XPlat Agent refreshed, ZENworks icons representing the assigned Mac Bundles can be displayed in the NAL Window. The NAL Window can be invoked by “right-clicking” the ZENworks icon and selecting ZENworks Window. However the local OS X user must be assigned the privileges in the XPlat Agent’s local data base necessary to install and launch Mac Bundles using the NAL Window. If this is not done, the user will not be able to open (install & launch) and verify applications as seen in the graphic above.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 25 To report suspected copying, please call 1-800-PIRATES.

In the graphic above you see that a Terminal Window has been opened on the Mac device and the following commands were executed as the root user:

 zac ue “*” +Configure

 zac ue “*” +Install These two commands are part of the ZENworks XPlat Agent. The first zac command allows any local user the rights needed to configure logging levels for the XPlat Agent. The second zac command allows any local user the rights necessary to install and launch Mac Bundles using the NAL Window. These two commands could be configured in a Mac Bundle. Then that Mac Bundle could be installed from the Terminal prompt using the following command as the root user:

 zac bin Once the zac command has been used to grant rights to the local user, the local user has the ability to launch and verify Mac Bundles using the NAL Windows as shown above.

26 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Objective 4 Understanding the Future for Mac OS X in ZCM

This objective lists some of the features for Mac Support that are being considered for future releases of ZENworks Configuration Management.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 27 To report suspected copying, please call 1-800-PIRATES.

28 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 29 To report suspected copying, please call 1-800-PIRATES.

Thank You for attending this session!

30 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.

Version 1 Copying all or part of this manual, or distributing such copies, is strictly prohibited. 31 To report suspected copying, please call 1-800-PIRATES.

The legal crap....

32 Copying all or part of this manual, or distributing such copies, is strictly prohibited. Version 1 To report suspected copying, please call 1-800-PIRATES.