supress smart card pairing prompt
Disable Pairing Dialog sudo defaults write /Library/Preferences/com.apple.security.smartcard PairingUID -string DISABLED re_Enable sudo defaults delete /Library/Preferences/com.apple.security.smartcard PairingUID
Ensure Security Auditing Is Enabled
Enable Auditing $ /usr/bin/sudo /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.auditd.plist Read Auditing Setting LAUNCHD_RUNNING=$(/bin/launchctl list | /usr/bin/grep -c com.apple.auditd) AUDITD_RUNNING=$(/usr/sbin/audit -c | /usr/bin/grep -c "AUC_AUDITING") if [[ $LAUNCHD_RUNNING == 1 ]] &&…
Smart Card resources, services, workflows and guidance
Apple Macintosh macOS Smart Card resources Smart Card usage: Apple Platform Development Apple Smart Card Configuration Profile Settings: Link Matt Woodruff github SmartCard-Scripts: Link PIV Authentication on macOS As federal…
Developing Your Mac Compliance Strategy Generating Baselines and Guidance
The Apple Deployment and Management exam doesn’t test you on the learning objectives covered in this tutorial. Link: https://it-training.apple.com/tutorials/deployment/sec020
Why do we sign packages, profiles and configurations for Apple and Jamf Pro?
Security: Signed packages, profiles, and configurations help ensure the authenticity and integrity of the contents. When an item is signed using a digital certificate, it creates a unique digital signature.…
Scan folder of software for hash values and Developer ID and publish csv
This script: An Apple script to check the 256 hash value, 512 hash value, and developer id, from a macintosh software folder named Ed_Software filled with software on the users…
Creating Public Certificate for Jamf Pro Server
Using OpenSSL to Create a Certificate Keystore for Tomcat Link: https://docs.jamf.com/technical-articles/Using_OpenSSL_to_Create_a_Certificate_Keystore_for_Tomcat.html Step 1: Creating a Public Certificate for Your Jamf Pro Server To create and configure a public certificate for…
Jamf Compliance Editor
Jamf Compliance Editor is a tool that provides macOS system administrators with an easy way to establish and manage compliance baselines on their fleet of macOS devices. This tool is…
public key certificate Trust Stores
Trust Stores This page provides a high-level overview of PKI trust stores (also called certificate stores or key stores). It also has a list of public trust stores and settings.…
mSCP jamf scripts
Bob Gendler one of the macOS Security Compliance Project (mSCP) Authors has posted some (FANTASTIC) scripts that will help integrate your mSCP project into a jamf instance. This will help…