Managing Macintosh OS-X with Novell ZCM 11.2 Lecture ZEN15 Novell Training Services ATT LIVE 2012 LAS VEGAS www.novell.com
Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or more additional patents or pending patent applications in the U.S. and in other countries. Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA 02451 U.S.A. www.novell.com Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page (http:// www.novell.com/documentation). Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners. 2
Contents SECTION 1 Objective 1 Objective 2 Objective 3 Objective 4 Managing Macintosh OS X with ZENworks 11.2 Configuration Management3 Product Positioning of Mac Support in ZCM 11.2 5 Management Goals for OS X Support in ZCM 11.2.............................................................. 6 Identifying OS X Support Requirements...................................................... 7 Understanding OS X Management Features in ZCM 11.2 8 Defining the Capabilities of the MAC XPlat Agent............................................................. 9 Installing the Mac XPlat Agent............................................................ 11 Delivering Content to the Mac 19 Understanding Mac OS X Software Packages......................................................... 20 Configuring Mac Bundles.......................................................... 22 Running Mac Bundles Using the Novell Application Launcher Window.......................................................... 25 Understanding the Future for Mac OS X in ZCM 27 1
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture 2
Managing Macintosh OS X with ZENworks 11.2 Configuration Management SECTION 1 Managing Macintosh OS X with ZENworks 11.2 Configuration Management This course is a combination of lecture and demonstrations intended to provide you with a solid overview of how ZCM 11.2 provides centralized management and support for Apple Macintosh OS X devices. The features provided by ZCM 11.2 will give you the ability to manage your Apple OS X computers throughout your enterprise. The objectives for this session are: 1. Product Positioning of Mac Support in ZCM 11.2 on page 5 2. Understanding OS X Management Features in ZCM 11.2 on page 8 3
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture 3. Delivering Content to the Mac on page 19 4. Understanding the Future for Mac OS X in ZCM on page 27 4
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Objective 1 Product Positioning of Mac Support in ZCM 11.2 The following topics are presented for this objective: Management Goals for OS X Support in ZCM 11.2 on page 6 Identifying OS X Support Requirements on page 7 5
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Management Goals for OS X Support in ZCM 11.2 The main goal of the ZCM 11.2 release is to provide a consistent set of management capabilities across all platforms. All platforms supported by ZCM (Linux, Windows, and Mac) have at least the same capabilities of the Mac support in ZCM 11.2 In future releases, additional feature support will be added for the Mac OS X platform. ZENworks customers have been inquiring about Mac support for many releases. ZCM 11.2 provides Mac support that: is managed using the same ZENworks Control Center that manages Linux and Windows platforms is built into the core of the product without requiring additional licenses or product codes. 6
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Identifying OS X Support Requirements The graphic above shows which versions of the OS X platform are supported in ZCM 11.2. Note that the server versions of OS X are not officially supported platforms. In order to install the ZENworks Adaptive Agent (XPlat version) on OS X platforms, Java version 1.6 must already be installed on the machine. The Leopard and Snow Leopard operating systems had Java already installed. However Lion does not. However, if you select Go > Utilities > Java Preferences from Finder s menu bar, Java will automatically be downloaded and installed on the machine if the machine has an Internet connection. 7
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Objective 2 Understanding OS X Management Features in ZCM 11.2 The following topics are presented during this objective: Defining the Capabilities of the MAC XPlat Agent on page 9 Installing the Mac XPlat Agent on page 11 8
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Defining the Capabilities of the MAC XPlat Agent The version of the ZENworks Adaptive Agent (ZAA) that you install on OS X is based on the XPlat Agent code that is installed on Linux managed devices. This means the installer package can be downloaded from accessing the http:// <primary-server-dns>/zenworks-setup URL in a browser. Just as in the versions of the ZAA that are installed on Windows and Linux platforms, the ZAA for OS X provides: Location awareness - used to determine the Mac machine s closest server and can also be used as system requirements for Mac Bundles. Impersonation - Actions within Mac Bundles can be run as root if required; even though the locally logged-in user doesn t have root access. Just as with Windows and Linux managed devices, the ZCC can be used to issue Quicktasks to Macs running the XPlat Agent. However with this release the following Quicktasks are not yet supported for the OS X platform: Launch Executable 9
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Launch Script Launch Java Executable Other management capabilities native to the OS X XPlat Agent are shown in the graphic above. Currently a Mac managed device can not act as an Authentication or Imaging Satellite Server. 10
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Installing the Mac XPlat Agent The Mac XPlat Agent can be installed in a traditional Linux fashion. This entails: 1. downloading the appropriate PreAgent Installation Package from a Primary Server s zenworks-setup page, 2. using the chmod command at a Terminal Windows to assign the Execute Permission to the Package (thus making the Package executable) 3. running the PreAgent Installation Package. If you need to, you can run a command line utility to determine the machine s architecture so that you know whether to download the 32 bit or 64 bit version of the PreAgent Installation Package. The command to determine the machine s architecture is: sysctl hw.cpu64bit_capable the command will return hw.cpu64bit_capable: 1 if the machine is 64 bit the command will return 0 (or might even blow up) if the machine is 32 bit. 11
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture The graphic above depicts the PreAgent Installer installing the 19.pkg packages that comprise the XPlat Agent for the Mac. Once the installation has completed, and the user has logged out and then back in, the ZAA Icon will be shown in the upper right as depicted above. 12
Managing Macintosh OS X with ZENworks 11.2 Configuration Management However, many Mac users may not want or have the knowledge necessary to install the XPlat Agent from the Terminal window. In that case the ZCM Administrator can leverage Apple s Xcode Integrated Developer s Environment to create a.pkg installation package for the XPlat Agent. This would allow the user to simply double-click the icon for the packaged Agent installation from their desktop. Xcode is a free download from Apple and can be obtained from the URL shown above. This Xcode environment would only need to be installed on the Administrator s Mac. The process of using the PackageMaker (a utility that is part of the Xcode IDE) to create a Mac installation package for the XPlat Agent, has been fully documented by ZENworks Product Management. This document is available from the ZENworks Cool Solutions web site using the URL shown above. 13
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture An overview of the process for using Xcode s PackageMaker to create a Mac Installer Package for the XPlat Adaptive Agent is shown below: 1. On the Administrator s Mac, create a directory in your home directory such as / Users/username/ZENAgent 2. Download the PreAgentPkg_AgentMacComplete.bin from the %ZENWORKS_HOME%\install\downloads\setup_all\ directory on your Primary to your ZENAgent directory. 3. In your ZENAgent directory create a script named zenagent.sh. This script will contain the following two lines: #!/bin/sh /tmp/preagentpkg_agentmaccomplete.bin > /tmp/ zaainstall.log 4. From a Terminal window as root enter the following commands: chmod -R +rx /Users/username/ZENAgent chown -R root:admin /Users/username/ZENAgent 14
Managing Macintosh OS X with ZENworks 11.2 Configuration Management 5. Use the following command to launch the PackageMaker from the Terminal prompt: open -a /Developer/Applications/Utilities/ PackageMaker.app This will display the PackageMaker application from the Xcode IDE as shown above. 6. Follow the configuration steps for using PackageMaker as shown in the document available at: http://www.novell.com/communities/node/13558/ building-mac-os-x-package-install-zenworks-112- adaptive-agent 7. This process will generate a ZENAgent.pkg file represented by an icon like that shown in the graphic below. 15
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Double-clicking the package s icon will cause a standard Mac OS X installation for the ZENworks XPlat Agent to launch. The opening screen is shown in the graphic above. 16
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Once the ZENworks XPlat Agent is installed on a Mac OS X machine, the ZCM Administrator can build and assign Mac Bundles to the registered Mac machines in the zone. A Mac Bundle has Action Sets and Actions just like bundles for Windows and Linux devices. The available Actions that can be configured in a Mac Bundle are shown in the graphic above. Mac Bundles, like Windows and Linux Bundles can be pushed to devices by configuring schedules within the bundle or pulled by the user by double-clicking a bundle s icon in the Novell Application Launcher Window. 17
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture The other main capabilities provided by the ZENworks XPlat Agent for OS X are shown in the graphic above. 18
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Objective 3 Delivering Content to the Mac This objective explains how OS X applications are packaged for the Mac s OS X operating system and provides an example of how Mac Bundles are configured to deliver and launch applications on the Mac platform. The following topics are presented: Understanding Mac OS X Software Packages on page 20 Configuring Mac Bundles on page 22 Running Mac Bundles Using the Novell Application Launcher Window on page 25 19
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Understanding Mac OS X Software Packages Before discussing how to use ZCM 11.2 to deliver Mac Bundle content it is important to understand the various formats in which OS X application software is packaged for installation by a user..pkg archive This type of package installer format appears to the user to be a single file with a.pkg extension. However, a.pkg file is actually a self-extracting installer package. The.pkg actually contains multiple files and directories. Typically in a.pkg the following files and directories exist: archive.bom - bom stands for Bill of Materials. This is a manifest file that describes everything that will be installed by the package and where it goes in the file system. The bom file can be read using the lsbom command line utility. archive.pax.gz - an archive file that contains all of the files mentioned in the bom file. 20
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Info.plist - this file is used by Finder and other OS X utilities to know how to properly handle the files contained within the pax.gz archive and a Resources directory. A.pkg package can be installed by using either the: GUI Installer Utility that is part of OS X or by using the following command line utility from a Terminal prompt: sudo installer pkg mypackage.pkg target /.mpkg archive This type of archive contains the meta-data and multiple.pkg archives within the single.mpkg archive.app These also appear as a single file to the user and are commonly referred to as Application Bundles (as opposed to ZCM Bundles). The.app file will typically contain directories named: Content, Resources, and Plugins Application packaged in this format typically are installed by simply dragging and dropping the.app file into a folder. In most cases the /Application folder is the target directory. After installing the.app to a target directory, the application can be launched by: clicking the application s icon on the desktop or by issuing the following command from a Terminal prompt: open a /Applications/filename.app.dmg This type of file is used very often to deliver application content and OS upgrades to Mac OS X devices over the Internet. dmg files are really disk-image files like the ISO files used in Windows and Linux platforms. However the.dmg image-file has built-in compression and checksum capabilities. Double-clicking on a dmg image file will cause OS X to mount the contents to the /Volumes directory on the Mac. Typically once the dmg is mounted by the OS you will see that it contains a.app file. The following command line utility can also be used to mount the dmg so its contents can be accessed: hdiutil attach package.dmg 21
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Configuring Mac Bundles Delivering OS X applications to Macintosh computers involves the configuring and assigning Mac Bundles to the Device Objects in the zone that represent the target machines. In the ZCM 11.2 release bundles may only be assigned directly or indirectly to device objects (folders of devices, device groups, or directly to a device object). Generally speaking, you will need to configure the following in the Mac Bundle: an Install Action to place the.app file in the /Applications folder and a Launch Action to run the.app file. You ll need an example next. 22
Managing Macintosh OS X with ZENworks 11.2 Configuration Management In the Mac Bundle shown above, the Messenger.app file is placed into the / Applications folder on the target device using an Install Directory Action on the Install Action Set. 23
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture To run the Messenger application, the Launch Action Set has a Launch Macintosh Executable Action. This action launches the open command located in the /usr/bin directory on the Mac managed drive. The parameters -a /Applications/Messenger.app are passed to the open command in order to launch the Novell Messenger application. 24
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Running Mac Bundles Using the Novell Application Launcher Window Once the Mac Bundle has been configured and assigned to the Mac device, and the ZENworks XPlat Agent refreshed, ZENworks icons representing the assigned Mac Bundles can be displayed in the NAL Window. The NAL Window can be invoked by right-clicking the ZENworks icon and selecting ZENworks Window. However the local OS X user must be assigned the privileges in the XPlat Agent s local data base necessary to install and launch Mac Bundles using the NAL Window. If this is not done, the user will not be able to open (install & launch) and verify applications as seen in the graphic above. 25
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture In the graphic above you see that a Terminal Window has been opened on the Mac device and the following commands were executed as the root user: zac ue * +Configure zac ue * +Install These two commands are part of the ZENworks XPlat Agent. The first zac command allows any local user the rights needed to configure logging levels for the XPlat Agent. The second zac command allows any local user the rights necessary to install and launch Mac Bundles using the NAL Window. These two commands could be configured in a Mac Bundle. Then that Mac Bundle could be installed from the Terminal prompt using the following command as the root user: zac bin <bundle-name> Once the zac command has been used to grant rights to the local user, the local user has the ability to launch and verify Mac Bundles using the NAL Windows as shown above. 26
Managing Macintosh OS X with ZENworks 11.2 Configuration Management Objective 4 Understanding the Future for Mac OS X in ZCM This objective lists some of the features for Mac Support that are being considered for future releases of ZENworks Configuration Management. 27
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture 28
Managing Macintosh OS X with ZENworks 11.2 Configuration Management 29
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture Thank You for attending this session! 30
Managing Macintosh OS X with ZENworks 11.2 Configuration Management 31
ZEN15-Managing Macintosh OS-X with Novell ZENworks Configuration Management 11.2 / Lecture The legal crap... 32