DECS DER APPLE WIRELESS HELPER DOCUMENT A GUIDE TO THE DEPLOYMENT OF APPLE MAC NOTEBOOK COMPUTERS IN DECS WIRELESS NETWORKS apple Chris Downing, Senior Systems Engineer apple Viano Jaksa, Area Manager Next Byte (Education, Corporate & Government) June 2010 Next Byte (Education, Corporate & Government) telephone: 8338 7385 fax: 8338 7344 education.sa@nextbyte.com.au
!
Introduction How to use this document This document is intended to provide school IT administrators, support staff, teachers and IT consultants with information and assistance that will enable them to ensure that their Apple MacBook computers will be able to authenticate to the new DECS wireless networks that are being implemented in conjunction with the Digital Education Revolution (DER) project in SA schools. These networks conform to the 802.11n standard and are RADIUS-authenticated by a server that has been commissioned and set up for schools as part of this project. In this type of wireless network, each user has their own unique username and password, instead of using a shared password. This type of authentication gives two benefits: the highest class of security available, and the ability to use a single sign-on for network users. These instructions are accompanied by screenshots at each step of the process, in order to facilitate ease of use and understanding. Types of laptop implementation This document outlines instructions that relate to the two most common forms of laptop deployment in schools. The first kind can be described as a 1:1 Laptop Deployment. In this scenario, users are local users of their own computers, perhaps with administrative privileges. Their home folders reside on the local machine and not on the network (see page 2 for Step-by-Step Instructions). The second kind of laptop deployment is one where laptops are shared among users. Typically, these laptops might be in trolleys or in a central resource or storage centre and users are loaned or provided with the laptops for a defined period of time. In this type of deployment, the user s home folder resides on the network and not on the local machine (see page 5 for Step-by-Step Instructions). Additional resources For those who are unfamiliar with the Mac OS, or have little experience with Apple Mac computers, the following resources may help in providing a background understanding to the Apple-specific terms and references that are used in this document. http://www.apple.com/au/findouthow/mac/ Alternatively, Appendix 1 (see page 13) contains a glossary of introductory Apple Mac OS X terms and operations that may be a useful reference. If you are unable to fully understand the instructions in this document and cannot resolve the issues you are having, please make contact with your school s Apple supplier, who will be able to assist you. 1
Configuring for Local Users (typically in a 1:1 Laptop Deployment Scenario) This section deals with instructions that will enable you to set-up Apple MacBook computers that are part of a 1:1 deployment where each user is a local user of their own laptop computer and home folders and home directories reside on the local machine and not on a network share. This section of the helper document makes the following assumptions: 1. that you are able to login to a MacBook as a local user that has administrative privileges 2. that no third-party network tools have been installed on the laptop 3. that the new wireless network, RADIUS server and certificate services have been set up and configured correctly 4. that the test user that has been created can successfully login to the network from an existing cabled desktop computer. The initial step in the successful implementation of the Apple MacBook computers in a RADIUS authenticated wireless network, is to have your deployment vendor create a test user in active directory for you. This will enable you to test and validate the RADIUS authentication of your wireless network. Step-by-Step Instructions 1. Login using your normal username and password 2. Switch on Airport, if it s not already on, by clicking on the Airport icon in the menu bar and selecting Turn Airport On 3. Join the wireless network by clicking on the Airport icon in the menu bar and selecting the wireless network shown as School_Secure_Wireless in this example 2
4. The wireless network should challenge you for a username and password 5. Login using the test username and password created for you (select Remember this network) 6. Click OK 7. As a result of logging in you should be presented with a Verify Certificate window 8. Click the Show Certificate button 9. Ensure that the Always trust... check box is selected 10. Click Continue 11. You will then be asked to asked to input your own local username and password (shown as My Local Account in this example) 12. Click OK 3
13. Select the airport icon in the menu bar and choose Open Network Preferences... 14. Ensure that the Airport has an IP address 15. Ensure that 802.1x is authenticated and is showing a connect timer 16. Congratulations!!! 4
Configuring for Network Users (in a managed environment) This section deals with instructions that will enable you to set-up Apple MacBook computers that are part of a shared laptop deployment, where users share laptops that might be in trolleys or be part of other loan arrangements. In this type of deployment, users may login to different laptops and each laptop may accommodate a number of different users. Each user in this type of deployment logs in to a network directory and therefore the user s home folders and home directories reside on your school s server and not on the local machine. This section of the helper document makes the following assumptions: 1. that you are able to login to a MacBook as the local administrator 2. that you are able to login to Active Directory as a domain administrator 3. that the MacBook used for testing is running an unaltered installation of 10.6.1 (or later), as a fresh, or out-of-thebox machine 4. that the new wireless network, RADIUS server and certificate services have been set up and configured correctly 5. that a test user that has been created in Active Directory and can successfully login to the network from an existing cabled desktop computer. The initial step in the successful implementation of the Apple MacBook computers in a RADIUS authenticated wireless network, is to have your deployment vendor create a test user in active directory for you. This will enable you to test and validate the RADIUS authentication of your wireless network. Step-by-Step Instructions 1. Login using the local administrator username and password 2. Switch on Airport, if it s not already on, by clicking on the Airport icon in the menu bar and selecting Turn Airport On 3. Join the wireless network by clicking on the Airport icon in the menu bar and selecting the wireless network shown as School_Secure_Wireless in this example 5
4. The wireless network should challenge you for a username and password 5. Login using the test username and password created for you (note: select Remember this network) 6. Click OK 7. As a result of logging in you should be presented with a Verify Certificate window 8. Click the Show Certificate button 9. Ensure that the Always trust... check box is selected 10. Click Continue 11. You will then be asked for the local administrator username and password (shown as Local Administrator in this example) 12. Click OK 6
13. Select the Airport icon in the menu bar and choose Open Network Preferences... 14. Ensure that the Airport has an IP address 15. Ensure that 802.1x is authenticated and is showing a connect timer 16. select Advanced in the bottom right of the window 17. In the resulting window, check that your new wireless network is now in the list of preferred networks 18. Select the 802.1X tab 7
19. Note the User Profile (on the left hand side of the window) for your new wireless network 20. click the + button in the bottom left of the profiles list 21. From the popup menu, select Add Login Window Profile 22. Rename the Login Window profile to temp 23. Select and drag the user profile for your new wireless network and drop it on Login Window Profiles as shown 8
24. Select and remove temp from the Login Window Profiles list (using the - button) 25. Remove the username and password 26. Click the Configure Trust... button 27. In the resulting window, click + and choose Select Certificate From Keychain 28. In the resulting window, select the certificate from your RADIUS server and click OK (shown as Server.domain in this example) 9
29. Verify that this RADIUS certificate now appears in the list, as shown, and then click OK 30. click OK to close the Airport Advanced Preferences window 31. Click Apply (Important) 32. Click the Show All button at the top left of the window 33. Select the Accounts icon (under System) 10
34. Click the padlock icon at the bottom of the window and authenticate to make changes 35. Select Login Options (at the bottom of the Account List on the left) 36. Change the Display login window as: setting to Name and Password by clicking the radio button, as shown below: 37. Quit System Preferences 11
38. Log out, by clicking on the Apple Menu and selecting Log Out local administrator... in order to test your progress 39. Login as the test user created for you. (Note that this login process could take as long as 60 seconds) 40. After successful login, press command/shift/h to verify that you are logged in as the test user 41. Congratulations!!! 12
Appendix 1 INTRODUCTORY MAC OS X NOTES The Finder When you start up your computer, the Finder opens. The Finder is a program that s responsible for managing your files, applications, disks, network connections, and devices such as printers. The Finder is always on when your computer is running, though it may be in the background if you re using another program such as Mail. The Finder provides a menu bar along the top of the screen, and a Dock at the bottom edge. In between the menu bar and Dock are the desktop and any windows you have opened. The Menu Bar At the top of your screen is the menu bar. The leftmost menu is the Apple menu, designated by an Apple icon. When you are in the Finder, you ll see the Finder menu next to the Apple menu. When you use other applications, their menus may appear here instead. You can click the desktop at any time to get back to the Finder and see the Finder menu. The menu bar runs along the top of the screen. On the left end of the menu bar are the application menus. The name of the application you are currently using appears in bold next to the Apple menu. There are several other application menus, often with standard names such as File, Edit, Format, Window, and Help. On the right end of the menu bar are menus represented by icons. These menus show the status of your computer or give you quick access to certain features. Some icons can be added to the right end of the menu bar. For example, the Sound pane of System Preferences contains a checkbox for showing a volume slider in the menu bar. Some applications let you add an icon to the menu bar during installation. To rearrange the menu bar icons on the right end of the menu bar, hold down the Command key while dragging the icons. To remove them, hold down the Command key and drag them out of the menu bar. You can t rearrange the application menus on the left. 1
About Menus Menus contain lists of commands or options that perform actions when you choose them. For example, the Copy command in the Edit menu copies what you have selected in a document, and the Print command from the File menu prints the document. Pull-down menus appear in the menu bar at the top of the screen. Pop-up menus appear when you click a down arrow next to the menu. Shortcut menus appear when you Control-click an icon. Here are some things to try with menus: Click the menu name to open the menu. Click to highlight the command you want to use. If you see a triangular symbol next to an item, it has a submenu with additional commands. Click to choose a command and perform an action. If the command has an ellipsis (...) next to it, a dialog opens where you can specify additional options. If a command is dimmed, it is not available. For example, the Copy command may be dimmed unless you have selected some text. Point to the desktop (the background area of your screen) and click the mouse button while pressing the Control key on your keyboard. A shortcut menu appears. There are many things you can Control-click: icons, windows, links on webpages, and more. If you re not sure a shortcut menu is available for an item, try Control-clicking it. Double-click a word to highlight it, and then Control-click. In most windows you ll see a shortcut menu you can use to look the word up in a dictionary, or search for more information about the word. The Apple Menu The Apple menu, which contains frequently used items, is always on your screen. It s located in the upper-left corner and is represented by an Apple icon. To see the menu, click the Apple icon. Apple menu options About This Mac: View information about your computer, including your Mac OS X version, type of processor, and amount of memory. Software Update: Check for updates to any Apple software on your computer. If an update is found, you can click to install it. Mac OS X Software: Visit the Mac OS X Downloads website, where you ll find interesting and fun applications, including freeware and shareware, for your computer. System Preferences: Open System Preferences. 2
Dock: Customize the Dock the row of icons along the bottom of your screen. Location: Specify your location, if you have multiple locations configured. Recent Items: Quickly open applications, documents, or servers you ve recently used. Force Quit: Choose this option if an application is not responding. IMPORTANT: If you force an application to quit, you may lose any unsaved changes you have made in open documents. Sleep: Dim the screen and reduce power consumption without turning off the computer. Restart: Restart the computer without shutting down. Shut Down: Turn the computer off completely. Log Out: Log out of the current user account without shutting down the computer. This is useful if you share your computer with other users who have their own accounts. The Dock By default, the Dock is at the bottom of the screen. You can move the Dock to either side of the screen, and customize it in other ways. The Dock contains icons for applications, such as Mail, that you may use frequently. To open an application, click its icon. If you click the Finder (smiling face) icon in the Dock, a window opens and you see the organization of the folders and files on your computer. The Dock comes with icons for some applications; you can add others. When you minimize a window or open an application that isn t in the Dock, it appears in the Dock. The Dock contains a Downloads folder, where anything you download from the web can be saved. Safari, the web browser that comes with your computer, places downloaded items there automatically. You can add more folders to the Dock. Folders in the Dock are called stacks. A stack can be a handful of documents, a group of applications, or a set of folders anything you need to access frequently. When you click a stack, it springs open in an arc or a grid, depending on the number of items. The Dock provides several useful shortcuts: To open an item in the Dock, click its icon. To open a document using an application in the Dock, drag the document icon to the application icon. To view a menu of options for the Dock, first locate the gap in the Dock between the row of application icons and the Trash. Then hold down the Ctrl key and click within the gap. 3
You can customize the Dock by changing its magnification, repositioning it, and more. To change Dock preferences, choose Apple menu > Dock. About windows and the desktop Most of the information on your computer is displayed in windows. A window opens when you double-click an icon for a folder or a device such as the hard disk or a CD, or when you click an icon in the Dock. Try clicking the Finder (smiling face) icon in the Dock to open a Finder window. Finder windows have a toolbar at the top for common tasks, and a sidebar to provide quick access to items. You can customize and organize both the toolbar and the sidebar. You may work directly on the desktop in addition to working in windows. The desktop contains an icon for your hard disk, by default named Macintosh HD. You can keep other items on your desktop, and organize and customize it as you like. The active window is usually the window in front. A window is active if the buttons in the topleft corner are colored or more visible. Use those buttons to close the window, minimize the window as an icon in the Dock, or expand the window. You can use these buttons even if a window isn t in the front. Bringing a window to the front The active window is usually the window in front. There are three ways to make a window active: Click anywhere in the window. If you can t see the window you re looking for, drag other windows out of the way or minimize them. Hold down the mouse button on the application icon in the Dock; then choose the window you want to make active from the shortcut menu that appears. Press F9 to see all open windows; then click the window you want to make active. (On a portable computer, press Fn-F9.) Some windows always appear in front of other windows in an application. For example, the Font window appears in front of even the active window so you can conveniently format text without closing other windows. 4
Moving and resizing windows To resize and move windows: Hold down the mouse button while you drag the bottom-right corner of a window. If there is a resize control, the window size will change as you move the mouse. Some windows do not allow you to change the size. Click the green zoom (+) button to toggle between a larger and smaller window size. Drag a window s title bar at the top. Some special windows can t be moved or resized, and may require that you perform an action or answer a question before you can continue with a task. Hiding windows To more easily see your work when you have several windows open, you can temporarily hide individual windows or entire applications. There are several ways to hide windows: To hide one window, click the yellow minimize (-) button in the window s upper-left corner. To hide windows in the Finder, choose Finder > Hide Finder, or Finder > Hide Others. If you don t see the Finder menu, you are in an application. To hide windows in an application, open the application menu and choose one of the Hide options. For example, in TextEdit choose TextEdit > Hide TextEdit, or TextEdit > Hide Others. To hide all windows so you can see the desktop, press F11. Press F11 again to return to normal viewing. (On a portable computer, press Fn-F11). To bring windows back, click a window or application icon in the Dock, or choose Show All from any application menu. Changing your computer s settings You use the System Preferences application to set or change many systemwide settings for your computer, such as the date and time, the way your keyboard and mouse work, and your network settings. To change your computer s settings: Choose Apple > System Preferences, and then click the icon for the settings you want to change. If the settings are dimmed and the lock icon is locked, click the icon and type the name and password of an administrator user for the computer. (The first user you set up is an administrator.) 5
If settings are dimmed and there isn t a lock icon, you may be prevented from changing the setting. Contact your system administrator or the person who administers your computer. To change settings for an application, open the application and choose Preferences from the application menu. Finding settings in System Preferences System Preferences contains hundreds of options you can set to customize your computer. You can quickly search System Preferences to find the system setting you want. To find system settings: Choose Apple > System Preferences. In the search box, type a word or phrase that describes what you want to do. For example, if you want to share a printer with other computers, type share printer. As you type, you see possible matches to what you re typing appear below the search box. When you see what you re looking for in the search results list, stop typing. One or more preferences are spotlighted in the System Preferences window. Click the item in the list that matches what you want to do. The preference pane opens, allowing you to change the setting. About Printers Print & Fax Preferences lets you manage the printers and fax machines you use. To view Print & Fax Preferences, choose Apple > System Preferences and click Print & Fax. To add a network printer: 42. Choose File > Print, and then choose Add Printer from the Printer pop-up menu. 43. Select the printer in the dialog that appears and click Add. The dialog lists Bonjour, AppleTalk, IP, shared, and Open Directory printers. You may need to wait a short while before your printer appears. 44. If you don t see your printer, try one of the following: To connect to an AppleTalk printer, click AppleTalk in the toolbar, select the zone the printer is in, select the printer, and click Add. If AppleTalk wasn t enabled already, clicking AppleTalk enables it. To connect to an IP printer, click IP in the toolbar and enter the printer s information. 6
To print to another type of printer, click More Printers, choose the type of printer from the pop-up menu, select the printer, and click Add. When you select your printer, Mac OS X finds the printer s driver and adds the printer to the Printer pop-up menu. If Mac OS X can t find the printer driver, Driver not Installed or Gutenprint appears in the Print Using pop-up menu. (Gutenprint is a collection of open source printer software, including Printer PostScript Description (PPD) files, that s part of Mac OS X. It was formerly known as Gimp-Print. Use Gutenprint software if other software is not available for your printer or if it seems that the printer s software isn t working properly.) Your computer can usually detect whether a printer has special accessories installed, such as additional paper trays, extra memory, or a duplex unit. If it can t, a dialog appears that lets you specify them. Make sure the settings in that dialog accurately reflect your printer s installed accessories so you can take full advantage of them. Managing print jobs Manage your print jobs by selecting a printer and clicking Open Print Queue. You can pause a printer, delete a print job, move a job to another printer, and review the printer s past jobs. Assigning a print job to a different printer If you have a print job waiting to print in one printer s queue, you can move it to another printer by dragging it to the other printer s queue. To assign a print job to a different printer: Click the current printer s icon in the Dock to open its window. Open the window for the other printer. To open the window, choose Apple menu > System Preferences, click Print & Fax, select the printer in the Printers list, and then click Open Print Queue. Drag the print job from the current printer s window to the other printer s window. DON T FORGET TO USE THE HELP MENU IN THE FINDER TO HELP YOU FIND ANSWERS TO YOUR QUESTIONS 7