Security Archives - Full Metal Mac

Smart Card resources, services, workflows and guidance

June 27, 2023Security, Smart Card

Apple Macintosh macOS Smart Card resources Smart Card usage: Apple Platform Development Apple Smart Card Configuration Profile Settings: Link Matt Woodruff github SmartCard-Scripts: Link PIV Authentication on macOS As federal…

Developing Your Mac Compliance Strategy Generating Baselines and Guidance

May 19, 2023macOS Security Compliance Project (mSCP), TrainingCenter for Internet Security, education, Federal Compliance, link, NIST, Security, STIG, training

The Apple Deployment and Management exam doesn’t test you on the learning objectives covered in this tutorial. Link: https://it-training.apple.com/tutorials/deployment/sec020

Why do we sign packages, profiles and configurations for Apple and Jamf Pro?

April 18, 2023SecuritySecurity, Signing Certificate

Security: Signed packages, profiles, and configurations help ensure the authenticity and integrity of the contents. When an item is signed using a digital certificate, it creates a unique digital signature.…

Scan folder of software for hash values and Developer ID and publish csv

March 28, 2023SecurityAppleScript, automation, Developer, hash, Patching, Security

This script: An Apple script to check the 256 hash value, 512 hash value, and developer id, from a macintosh software folder named Ed_Software filled with software on the users…

Creating Public Certificate for Jamf Pro Server

January 5, 2023SecurityGotcha!, Jamf Pro, openssl, PKI, setup, Signing Certificate, ssl

Using OpenSSL to Create a Certificate Keystore for Tomcat Link: https://docs.jamf.com/technical-articles/Using_OpenSSL_to_Create_a_Certificate_Keystore_for_Tomcat.html Step 1: Creating a Public Certificate for Your Jamf Pro Server To create and configure a public certificate for…

Jamf Compliance Editor

November 2, 2022macOS Security Compliance Project (mSCP)app, Jamf Pro, mSCP, NIST

Jamf Compliance Editor is a tool that provides macOS system administrators with an easy way to establish and manage compliance baselines on their fleet of macOS devices. This tool is…

public key certificate Trust Stores

August 29, 2022Securitylink, PKI

Trust Stores This page provides a high-level overview of PKI trust stores (also called certificate stores or key stores). It also has a list of public trust stores and settings.…

mSCP jamf scripts

August 29, 2022Apple, macOS Security Compliance Project (mSCP)automation, Jamf Pro, MDM, NIST, Security, STIG

Bob Gendler one of the macOS Security Compliance Project (mSCP) Authors has posted some (FANTASTIC) scripts that will help integrate your mSCP project into a jamf instance. This will help…

Common Platform Enumeration (CPE)

May 15, 2022SecurityAudit, Configuration Management, CPE, NIST, Security

Common Platform Enumeration (CPE) is a structured naming scheme for information technology (IT) systems, software, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a…

Common Vulnerabilities and Exposures (CVE)

May 15, 2022Securitycurl, CVE, Security, Terminal

json feed of all apple related things. https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple" curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple:macOS:catalina" https://csrc.nist.gov/CSRC/media/Projects/National-Vulnerability-Database/documents/web%20service%20documentation/Automation%20Support%20for%20CVE%20Retrieval.pdf this is the documentation. of how to use their CVE feed hope this link works…