ITS technicians will be migrating all ITS-supported Macs from NoMAD to Jamf Connect for user authentication.
| Info |
|---|
This article is intended for central and distributed IT professionals. If you are an end-user of a university-owned Mac, you can learn more about device management here: Device Management at UConn |
| Note |
|---|
This is a destructive process that will erase all data on a client machine. It is the responsibility of the client to confirm in writing that their data is fully backed up. |
...
Part 1: Before we have the computer
Log into Jamf with your NetIDadmin.
Check the serial number to ensure that the computer can support Jamf Connect. Generally, this should be a computer from 2018 or newerthat can support the newest version of macOS (version 15 Seqouia). You can check a computer’s model on Jamf, or on the Apple warranty website.
In the ticket, send the client instructions to back up their data. You can use the <TBD> canned response in Jira Data Backup Confirmation Jira form, published externally. The client must respond to this with a confirmation that the data is backed up. If they request assistance with data backup, they will have to book an appointment with an FTE.
Once we receivewritten confirmation from the Jira form by the client that they have sufficiently backed up their data, we can send the drop-off canned response in Jira.
...
You will now fully erase the computer and install the newest supported version of macOS. If the client computer runs Apple silicon (M1, M2 Pro, etc.), use Method 1. If the computer runs an Intel processor (i5, i7, etc.) or otherwise cannot complete runs into issues with Method 1, use Method 2.
Method 1 (Apple Configurator)
You will need a secondary second Mac with Apple Configurator installed for this process.
...
Follow the instructions provided by Apple to install the newest supported version on the Mac: https://support.apple.com/en-us/102655
| Info |
|---|
You may need to conduct a PRAM reset on an Intel Mac in order to have it pick up its newest supported version of macOS when preparing the recovery environment. Shut the computer down, then hold down Command+Option+P+R and press the power button. Wait for the power to cycle twice, then boot into Internet Recovery. |
Part 2c: We have the computer - enrolling into modern management
...
Navigate through the setup prompts. This will include steps such as as selecting a region and language.
If it asks you to create a user account or sign in with an Apple Account/ID, the PreStage enrollment was not assigned properly. Stop here and ensure the assignment was set correctly. Then restart the computer and try this step again.
When asked to enroll under management for University of Connecticut, select Enroll. This step may take a few minutes.
If asked, enable Location Services.
When the computer is at the UConn-branded Microsoft Entra ID login screen (click to expand →
), enrollment is complete.In Jamf, search for the computer via its serial number. Select the computer object then select Edit.
Under the Site dropdown, select the appropriate tag for the device. For ITS-managed machines, select MWManagedWorkstation. In the Asset Tag field, add the UConn inventory tag (Cxxxxx). Then select Save.
Add the staff member who will be assigned to this asset. This is usually the person who is the reporter for the ticket. Navigate to the User and Location section, then select Edit.
Search for the assigned employee via their NetIDpublished name (UConn email name), then select Search.
Select the employee’s NetID.
Select Save.
Add the computer to appropriate static groups. On the sidebar, navigate to Computers → Static Computer Groups. Most single-user machines managed by ITS will be placed in mwManagedWorkstation - Staff / Faculty, and shared machines will be placed in mwManagedWorkstation - Lab.
Select the static group and navigate to Assignments → Edit. Search for the computer via its serial number and ensure that it is checked. Select Save.
Allow the computer to be left online for about 15 minutes to receive policies and configuration profiles.
You can now send the canned response for device pick-up for the client.
...