Sept 2017 – MacAdmins Meeting

14 Sep Sept 2017 – MacAdmins Meeting

Sept 20th 2017 – University of Utah, MacAdmins Meeting

The University of Utah, MacAdmins Meeting is held monthly at the Marriott Library on the 3rd Wednesday of each month at 11 AM Mountain Time. Presentations cover Apple technology and integration in a heterogeneous university enterprise environment. This months meeting will be held on Wed, Sept 20th 2017, and we will provide live broadcasted and archives that will be made available 2-3 days after the meeting.

If you have suggestions on presentations, questions or comments, please your the Contact Us option.

What’s New  – By Todd McDaniel, Marriott Library, University of Utah

This presentation will cover new information pertaining to Apple administration including operating system & application updates, security, hardware support & how-to’s and other notables.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Implementing Containers with Lightweight Native macOS Virtualization – Izik Eidus & Manisha Arora, Veertu

Container-based application development and deployment have significantly changed the landscape of developer operations. Why a container approach? Because containers are built to be extremely lightweight, easy to interact with and extremely portable. While macOS cannot yet be run inside a container, (different than running Linux and windows containers on macOS), a lightweight native virtualization for macOS coupled with other DevOps modules can enable a container like DevOps on macOS.

Veertu Anka Build and Anka Flow products enable mac Admins and mac Devops to manage the mac develop/test infrastructure in a more agile, scalable manner and support developers with reproducible and on-demand environments. In this presentation, you can learn how to transform your physical mac hardware test environment into a macOS private cloud which is easier to manage, can support on-demand provisioning and scale.

Some of the example use cases are as follows:

• Setup an agile and scalable macOS lab environment to test macOS new updates, versions, etc.
• Setup and manage macOS private cloud to support iOS Continous Integration.

Izik Eidus (Co-founder) is the original team member of KVM virtualization development team. Has also developed nested virtualization for public cloud. Manisha Arora (Co-Founder) does product management, sales, and marketing executive in enterprise infrastructure, cloud and devops technologies.

What is Anka?

Anka is a set of tools to create, manage and distribute build and test macOS reproducible virtual environments for iOS and macOS development. The core of the Anka toolset is a native macOS hypervisor built on top of FreeBSD bhyve  and xhyve  and leverages Apple’s macOS Hypervisor.Framework  for virtualization. This hypervisor includes PV network and disk drivers that are required for high performance operations inside the Anka VMs. The Anka toolset also includes a Controller  and a Registry  module. Anka Controller  is used to build and manage an on-premise macOS cloud using Anka hypervisor, for development purposes. Anka Registry  is used to version control macOS build and test VMs and distribute them to workstations and the private macOS cloud.

The Anka application comes with a command line interface (anka ) that allows for easy, straightforward management of guest virtual machines built with Anka. Anka also provides the ability to interact with a remote Anka registry, and is purpose-built for engineers working in macOS or iOS development workflows. We think of Anka as a simple toolset that allows you to build your own on-premise macOS private cloud, whatever your purpose may be.

For more information, see this web site.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Device Based Internet Access on macOS – Topher Nadauld, University of Utah, Marriott Library

There are several ways to access an enterprise wireless network. You might use 802.1X, PEAP or some other form of the Extensible Authentication Protocol (EAP). For device based internet,
EAP-TLS is the authentication protocol used to connect to the wireless network. EAP-TLS uses Simple Certificate Enrollment Protocol (SCEP) and Network Device Enrollment Service (NDES) to generate a device based certificate to connect to the wireless network.

This presentation will cover the process of setting up devices based internet access using NDES, SCEP and Jamf Pro that is used to implement Mobile Device Management (MDM). This process has been piloted on our student checkout laptops to allow quick on-boarding for the campus EAP-TLS implementation with multiple users on the same device.

The Protected Extensible Authentication Protocol, also known as Protected EAP or simply PEAP, is a protocol that encapsulates EAP within a potentially encrypted and authenticated Transport Layer Security (TLS) tunnel. When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other. Certificates must meet specific requirements both on the server and on the client for successful authentication

For more information on EAP-TLS, see this web site.

Here is a previous campus MacAdmin presentation covering the topic of “Replacing PEAP-MSCHAPv2 with EAP-TLS” by Corey Roach, University of Utah, Manager, Enterprise Security:

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Swift Overview – James Reynolds, University of Utah, Biology

Swift is Apple’s modern open source programming language.  James will discuss the features and history of Swift, some pros and cons, how to write scripts with Swift, and go over some of the language basics.

• Video – To view archived presentation video, click here.
• Slides – To view the presentation slides, click here.

Open Discussion

Questions, comments, problems and fixes.

Directions

Note, due to scheduling conflicts with our usual meeting location, we will be meeting at the Marriott Library room 1705A located inside the Faculty Center located north of Mom’s Cafe.

For directions to the University of Utah monthly Mac Managers Meetings see the following web page.

Archive & Live Presentation(s)

• A live broadcast of the presentations will be available from this web page.
• Archives of the presentations will be available from this web page.