TweetFollow Us on Twitter

JAMF Software's Casper Suite for Imaging

Volume Number: 25
Issue Number: 08
Column Tag: Systems Administration

JAMF Software's Casper Suite for Imaging

Client Image Deployment and Maintenance - Part 2

by Criss Myers

In Part 1 we looked at the setup and configuration of the server side section of the Casper Suite. In Part 2 we will create the content that is to be deployed as well as setting up various configurations for deployment. We also need to add the clients to the servers database so that we can then manage them. After that we look at how we will deploy the image and allow our users to install software themselves.

Composer 7

Now that the Server side is set up, you need to create the deployment content. This is created with the new Composer 7. Since the idea is to create a package based deployment, you can create a small OS base image and then create packages for all the additional content. You could use the same DMG already created from the install disk or create a custom OS image. I prefer to create my own with a few modifications.

Next, using Composer, create additional packages for all the software you wish to install and also any scripts you will use either before or after imaging. If you need some help with this, Jamf JAMF have created a Resources pack of scripts available on their website:

http://www.jamfsoftware.com/jamf_nation/resourcekit.php

Recon

Now that we have the server setup and the deployment content ready, we need to add the computers to the JAMF Software Server (JSS). Each client will have a separate entry in the JSS with a unique JSS ID. There are a few methods for doing achieving this.

If the computer is already on the network then you can use the JAMF Recon tool. This will add the client to the JSS and install the Casper client tools on the client.

Each one of the JAMF Software tools connects to the JSS upon launch and requires you to login. Access to the JSS with these tools is controlled by the Accounts privileges settings you setup earlier in the JSS web interface.

Recon can be used in a few different ways.

1. You can launch Recon on the local box and add just that single machine to the JSS. You can then add additional details about the client such as bar codes, purchasing information, details on peripherals connected to this computer, as well as user information and location. If the computer already exists in the JSS, then the next time you launch Recon on the client, it will gather the existing record that you can then edit further

2. You can add a single remote computer, if you know the DNS or IP of a computer you can add this to the JSS. However you must have SSH enabled on the remote computer. Enter the SSH account details into Recon allow with any other details.


Fig. 1. Casper Recon application

3. If the computer is already on the network and has SSH enabled for an account, then you can Recon all your existing computers. The Network Scanner allows you to scan the network range and add all those computers to the JSS. This however will not add any of the advanced details, so you will need to edit that later in the JSS web browser.


Fig. 2. Casper Recon's Network Scanner.

4. If you do not have SSH enabled on a client, or you wish to add the client with a different SSH account that has not already been setup, then you can create a custom installer package. If you also have Apple Remote Desktop then you can install and run this package remotely. This will create a local SSH account, enable SSH with secure SSH and also hide the local account. Once the PKG is created you can then deploy it via ARD.


Fig. 3. Casper Recon, creating a QuickAdd.pkg to deploy via Apple Remote Desktop.

If the clients are not already on the network, or are either new machines or future purchases, then you can setup some PreStage Imaging. PreStaging allows you to automate the creation of new entries in the JSS when a client attempts to connect. Under the Management tab and then PreStage Imaging of the JSS web browser you can create a new PreStage.

Casper Admin

The next step is deciding what content gets deployed to whom. The advantage of a package-based distribution is that you can create separate configurations for different clients, but still use the same source content. The Casper Admin tool is used to manage the main Distribution Point, which is then replicated to all other distributions points.

Launch Casper Admin and connect to your JSS., Iit will then mount the Distribution point as "CasperShare" on to the desktop using the credentials defined in: JSS – Management – Distribution Points – File sharing – Read / Write Username. You will then get a blank Casper Admin Window. On the left of this window is the list of Configurations and File Servers, in the middle is the Categories and then the content.

The next step is to upload the content. Drag the DMG's, PKG's and script files on to the Casper Admin window and they will be uploaded and placed into the correct folders on the share. They will however appear in bBlue as they are not in any category. From the tTool bar, create nNew cCategories. These will help you to structure your content. Useful , create categories could besuch as Adobe, Apple, Printers, Scanners, Drivers, Update etc. As you use Casper more you will probably create even more categories. Drag the packages into the relevant categories. Double click on a package to edit its details. In the popup window you can get a Summary of the package, creation date, format, JSS ID etc, the Info tab allows you to change the display name and category it belongs to. In the Options pane you can set the package priority, this defines the order in which packages are installed from 1-20 with the lower number being installed first.

The OS needs to be set to 1, as it is the first to be installed and also will then be installed by a block level copy which is much faster and accurate.


Fig. 4. Casper Admin, Package information window, select a priority from 1-20.

Once you have all the packages uploaded and categorisedcategorized you can start making configurations. In the tool bar click new config, give the config a name and description. Choose from Standard or Smart configuration, a standard configuration is a new blank configuration and is best used for core configurations that will be central to all or most configurations. In this configuration you can then put the base OS, base applications and scripts. Click "Ensure that Computers imaged with this Configuration are managed" and enter the SSH account on the client. You can then choose an AD Binding to auto bind to after imaging.


Fig. 5. Casper Admin, Standard Configuration creation window.

A smart configuration is then based on an already created standard configuration, which you will then use to add specific applications.


Fig. 6. Casper Admin, Smart Configuration based on the "Base Core System" standard configuration.

You can then drag the relevant packages in to the configurations on the left within Casper Admin. When you view a smart configuration it will also display the packages within the Standard Configuration on which it is based. Click Hide Parent to hide these when viewing.

In order to add a printer for deployment, firstly you need to add them to the machine you are running Casper Admin on, then click the Add printer button, you will now be given a list of printers to add.

Adding a script is also easy, add them in the same way you would add a package then double click them in Casper Admin and choose from the priority that the script will run, i.e. before imaging, after imaging or at reboot. At reboot means the script will be added to the JAMF First Run script that is run once the client is imaged and has booted locally. The First Run script will contain, all of the "At Reboot" scripts, the AD auto binding, any Printers and any Adobe installs, as defined in the chosen configuration. (see Fig. 7) We now have everything installed and setup ready for deployment.


Fig. 7. Casper Admin, on the left the various different configurations, on the right the different categories and in the middle the deployment content, DMGs, PKGs, scripts and printers.

Casper Imaging

Casper Imaging is the application used to connect to the JSS and deploy the relevant configuration to the client. Casper Imaging can be run from any booted drive so does not have to be run from within a NetBoot image. If you want to image a drive locally, then you can run Casper Imaging locally, login to the JSS, choose the drive and configuration you require, then deploy that image from the Distribution point on the network.

However the advantage to the Casper Suite lies in the automating of the whole imaging process so that there is very little user input. This means that when Casper Imaging is run, it logs into the JSS, checks the client to see if it is in the database and then gathers the configuration for deployment. The client then mounts the Distribution Point, runs any "before" scripts, copies the Base OS as a block level copy, then installs all the remaining packages and any "after" scripts. The client reboots, runs the First Run script and is ready to login.

In order for Casper Imaging to do this it needs what is called Autorun data, each record in the JSS has an autorun entry. If the computer is already in the JSS this can be edited? in the Inventory Pane. Once a client is added? via Rrecon then the autorun can be manually edited. This only needs to happen once however and any new packages that are installed via maintenance can be automatically added to the client's autorun. The PreStage iImaging can also define the autorun details so that new machines can be imaged with little user input, all they need to do is point the client to boot from the network.

Casper Remote

The client is now imaged and ready for use, however, what if an update is released or a new piece of software is required? The idea of a package-based system is that you could install packages as required. With Casper there are a few ways to deploy updates and extra packages. One method is to use Casper Remote. This only works for computers that are currently turned on or will become active within a short time. Casper Remote is used on a computer to connect to other clients via SSH and then instruct them to connect to the Distribution Point and pull the required software / printer or script down, or run various advanced settings. This is a time when dividing you computers into buildings or/ departments and you packages into categories is advantageous. When you launch Casper Remote you need to login to the JSS, you will then get your list of computers and also your content. Select a client and then a package to install and click go. If you select more than 1 computer you will see on the right side of the window the computers that were successful, those that fail and those that could not be contacted. A log will also be submitted which can be accessed later under the Logs – Casper Remote Logs section of the JSS web interface. When installing packages with this method you can tick the "Update Autorun" box to enable the installation of that package the next time that client is imaged


Fig. 8. Casper Remote.

You can also use Casper Remote to add edit or delete local accounts, set the EFI password, reset the SSH account or bind to AD settings. Also set the client to reboot from the netboot server or run advanced settings such as run Recon, flush caches, verify the startup disk or run a Unix command etc.

If the client is offline then this method will not work, but one of the great features of the Casper Suite is the use of a policy. Using a policy enables you to create automated actions that can help you to maintain your clients. There is not much that cannot be done with a policy. In later articles we will investigate many of the ways to use policies in combination with other aspects of Casper. To make use of a policy, Casper uses what are called "triggers", these are task-based schedules. The default trigger is "15mins", this means that every 15 minutes the client makes an SSH connection to the JSS and checks to see if any policies with this trigger relate to that client. If so then the client executes that policy. If you chose to use startup scripts and login hooks, then policies with these triggers will be checked respectively. You can make your own task schedules under Management – Scheduled Tasks in the JSS web browser.

Casper VNC

If you need to control or monitor a client remotely then you can use Casper VNC, which can be access via the tool bar buttons in Casper Admin. Select the client from the list and either Control or Observe the client. Casper Remote will SSH to client and start the VNC server, then when you're finished it will stop the VNC server.

Casper Mobile

If you have an iPhone or iPod touch, you can use the Casper tools via Casper Mobile.

Self Service

The final thing to look at is the users themselves. Casper is a great suite for managing and imaging client Macs and enables an administrator to reduce the amount of client side input from technicians, etc, during imaging and maintenance. However what if the user needs to have an input?

New in Casper Suite 6 is an application called Self Service, this allows administrators to assign policies that users can execute without any privileges needed. Self Service is a web-based tool so you can include html and web links in the item descriptions. You can create a self service policy the same way you make a normal policy but enable it as a self service item and then fill in the self service section.


Fig. 9. the Self Service section of a policy created in the JSS web browser.

The client side tool Self Service then accesses these. You can either assign access based on a user login or choose anonymous login, where the Self Service items are restricted per machine. If you choose to "Feature This Policy on the Main Page" then it will appear on the top strip. You can also add icons for each item. This allows you to empower your staff or clients to install items themselves and execute scripts, without having to give them administration rights.


Fig. 10. Self Service application, the top strip has the feature items with custom icons.

Conclusion

As an all round Mac management suite the JAMF software is hard to beat. This article covers only the basics that can be done with Casper and in future articles we will look at using Casper to deploy Microsoft Windows to your Mac clients as well as some advanced methods to help you to automate the management and maintenance of your client machines.


Criss Myers is a Business Support Analyst (Mac Services), for Learning and Information Services, at the University of Central Lancashire, Preston, United Kingdom. He has been a Systems Server Administrator from the very first version of OS X Server. He Works with Macs as well as Linux, Unix and Windows and specializes in Image deployment and maintenance as well as client management.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Paperless 3.0.6 - $69.95
Paperless is a digital documents manager. Remember when everyone talked about how we would soon be a paperless society? Now it seems like we use paper more than ever. Let's face it - we need and we... Read more
BetterTouchTool 3.141 - Customize multi-...
BetterTouchTool adds many new, fully customizable gestures to the Magic Mouse, Multi-Touch MacBook trackpad, and Magic Trackpad. These gestures are customizable: Magic Mouse: Pinch in / out (zoom)... Read more
TextMate 2.0.rc.29 - Code/markup editor...
TextMate is a versatile plain text editor with a unique and innovative feature set which caused it to win an Apple Design Award for Best Mac OS X Developer Tool in August 2006 A rapidly growing... Read more
Little Snitch 4.4.1 - Alerts you about o...
Little Snitch gives you control over your private outgoing data. Track background activity As soon as your computer connects to the Internet, applications often have permission to send any... Read more
Little Snitch 4.4 - Alerts you about out...
Little Snitch gives you control over your private outgoing data. Track background activity As soon as your computer connects to the Internet, applications often have permission to send any... Read more
MPlayer OSX Extended 16 - Multimedia pla...
MPlayer OSX Extended is the future of MPlayer OSX. Leveraging the power of the MPlayer and FFmpeg open source projects, MPlayer OSX Extended aims to deliver a powerful, functional and no frills video... Read more
Google Chrome 75.0.3770.142 - Modern and...
Google Chrome is a Web browser by Google, created to be a modern platform for Web pages and applications. It utilizes very fast loading of Web pages and has a V8 engine, which is a custom built... Read more
Notability 4.0.4 - Note-taking and annot...
Notability is a powerful note-taker to annotate documents, sketch ideas, record lectures, take notes and more. It combines, typing, handwriting, audio recording, and photos so you can create notes... Read more
ffWorks 1.3.1 - Convert multimedia files...
ffWorks, focused on simplicity, brings a fresh approach to the use of FFmpeg, allowing you to create ultra-high-quality movies without the need to write a single line of code on the command-line.... Read more
EtreCheck Pro 6.0.2 - For troubleshootin...
EtreCheck is an app that displays the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to... Read more

Latest Forum Discussions

See All

TEPPEN guide - Tips and tricks for new p...
TEPPEN is a wild game that nobody asked for, but I’m sure glad it exists. Who would’ve thought that a CCG featuring Capcom characters could be so cool and weird? In case you’re not completely sure what TEPPEN is, make sure to check out our review... | Read more »
Dr. Mario World guide - Other games that...
We now live in a post-Dr. Mario World world, and I gotta say, things don’t feel too different. Nintendo continues to squirt out bad games on phones, causing all but the most stalwart fans of mobile games to question why they even bother... | Read more »
Strategy RPG Brown Dust introduces its b...
Epic turn-based RPG Brown Dust is set to turn 500 days old next week, and to celebrate, Neowiz has just unveiled its biggest and most exciting update yet, offering a host of new rewards, increased gacha rates, and a brand new feature that will... | Read more »
Dr. Mario World is yet another disappoin...
As soon as I booted up Dr. Mario World, I knew I wasn’t going to have fun with it. Nintendo’s record on phones thus far has been pretty spotty, with things trending downward as of late. [Read more] | Read more »
Retro Space Shooter P.3 is now available...
Shoot-em-ups tend to be a dime a dozen on the App Store, but every so often you come across one gem that aims to shake up the genre in a unique way. Developer Devjgame’s P.3 is the latest game seeking to do so this, working as a love letter to the... | Read more »
Void Tyrant guide - Guildins guide
I’ve still been putting a lot of time into Void Tyrant since it officially released last week, and it’s surprising how much stuff there is to uncover in such a simple-looking game. Just toray, I finished spending my Guildins on all available... | Read more »
Tactical RPG Brown Dust celebrates the s...
Neowiz is set to celebrate the summer by launching a 2-month long festival in its smash-hit RPG Brown Dust. The event kicks off today, and it’s divided into 4 parts, each of which will last two weeks. Brown Dust is all about collecting, upgrading,... | Read more »
Flappy Royale is an incredibly clever ta...
I spent the better part of my weekend playing Flappy Royale. I didn’t necessarily want to. I just felt like I had to. It’s a hypnotic experience that’s way too easy to just keep playing. | Read more »
Void Tyrant guide - General tips and tri...
Void Tyrant is a card-based dungeon-crawler that doesn’t fit in the mold of other games in the genre. Between the Blackjack-style combat and strange gear system alone, you’re left to your own devices to figure out how best to use everything to your... | Read more »
Webzen’s latest RPG First Hero is offici...
You might be busy sending your hulking Dark Knight into the midst of battle in Webzen’s other recent release: the long-anticipated MU Origin 2. But for something a little different, the South Korean publisher has launched First Hero. Released today... | Read more »

Price Scanner via MacPrices.net

Amazon drops prices, now offers clearance 13″...
Amazon has new dropped prices on clearance 13″ 2.3GHz Dual-Core non-Touch Bar MacBook Pros by $200 off Apple’s original MSRP, with prices now available starting at $1099. Shipping is free. Be sure to... Read more
2018 15″ MacBook Pros now on sale for $500 of...
Amazon has dropped prices on select clearance 2018 15″ 6-Core MacBook Pros to $500 off Apple’s original MSRP. Prices now start at $1899 shipped: – 2018 15″ 2.2GHz Touch Bar MacBook Pro Silver: $1899.... Read more
Price drop! Clearance 12″ 1.2GHz Silver MacBo...
Amazon has dropped their price on the recently-discontinued 12″ 1.2GHz Silver MacBook to $849.99 shipped. That’s $450 off Apple’s original MSRP for this model, and it’s the cheapest price available... Read more
Apple’s 21″ 3.0GHz 4K iMac drops to only $936...
Abt Electronics has dropped their price on clearance, previous-generation 21″ 3.0GHz 4K iMacs to only $936 shipped. That’s $363 off Apple’s original MSRP, and it’s the cheapest price we’ve seen so... Read more
Amazon’s Prime Day savings on Apple 11″ iPad...
Amazon has new 2018 Apple 11″ iPad Pros in stock today and on sale for up to $250 off Apple’s MSRP as part of their Prime Day sale (but Prime membership is NOT required for these savings). These are... Read more
Prime Day Apple iPhone deal: $100 off all iPh...
Boost Mobile is offering Apple’s new 2018 iPhone Xr, iPhone Xs, and Xs Max for $100 off MSRP. Their discount reduces the cost of an Xs to $899 for the 64GB models and $999 for the 64GB Xs Max. Price... Read more
Clearance 13″ 2.3GHz Dual-Core MacBook Pros a...
Focus Camera has clearance 2017 13″ 2.3GHz/128GB non-Touch Bar Dual-Core MacBook Pros on sale for $169 off Apple’s original MSRP. Shipping is free. Focus charges sales tax for NY & NJ residents... Read more
Amazon Prime Day deal: 9.7″ Apple iPads for $...
Amazon is offering new 9.7″ WiFi iPads with Apple Pencil support for $80-$100 off MSRP as part of their Prime Day sale, starting at only $249. These are the same iPads found in Apple’s retail and... Read more
Amazon Prime Day deal: 10% (up to $20) off Ap...
Amazon is offering discounts on new 2019 Apple AirPods ranging up to $20 (10%) off MSRP as part of their Prime Day sales. Shipping is free: – AirPods with Charging Case: $144.99 $15 off MSRP –... Read more
Amazon Prime Day deal: $50-$80 off Apple Watc...
Amazon has Apple Watch Series 4 and Series 3 models on sale for $50-$80 off Apple’s MSRP as part of their Prime Day deals with prices starting at only $199. Choose Amazon as the seller rather than a... Read more

Jobs Board

*Apple* Graders/Inspectors (Seasonal/Hourly/...
…requirements. #COVAentryleveljobs ## Minimum Qualifications Some knowledge of agricultural and/or the apple industry is helpful as well as the ability to comprehend, Read more
Best Buy *Apple* Computing Master - Best Bu...
**710003BR** **Job Title:** Best Buy Apple Computing Master **Job Category:** Store Associates **Location Number:** 000171-Winchester Road-Store **Job Description:** Read more
Best Buy *Apple* Computing Master - Best Bu...
**709786BR** **Job Title:** Best Buy Apple Computing Master **Job Category:** Sales **Location Number:** 000430-Orange Park-Store **Job Description:** **What does a Read more
Geek Squad *Apple* Master Consultation Agen...
**709918BR** **Job Title:** Geek Squad Apple Master Consultation Agent **Job Category:** Services/Installation/Repair **Location Number:** 000106-Palmdale-Store Read more
*Apple* Systems Architect/Engineer, Vice Pre...
…its vision to be the world's most trusted financial group. **Summary:** Apple Systems Architect/Engineer with strong knowledge of products and services related to Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.