Management and Security powered by Landesk

Agent configuration for Macintosh devices

Ivanti® Endpoint Manager powered by Landesk uses agent configurations to gain control of devices and manage them. For Macintosh devices, these configurations are pushed to unmanaged devices using the same process used to push agents to Windows devices.

The Default Mac Configuration package contains the required agent for controlling Macintosh devices. To use this functionality, create a Mac agent configuration and then deploy the agent to your Mac devices.

After the agents have been installed, your Macintosh devices become managed devices. Then you can create custom configurations to have greater control of these devices.

NOTE: All devices must support TCP/IP.

Using the Macintosh agent configuration dialog

This section describes the agent configuration dialog for Macintosh devices. The dialog includes the following pages:

Deploying agents to Macintosh devices that use Secure Shell (SSH)

To place agents on Macintosh devices that have Secure Shell (SSH) turned on, you must specify the SSH login credentials for the unmanaged Mac devices by selecting Configure > Services > Scheduler > Change Login from the Windows console. You can then use the same push-based agent deployment you would use for Windows devices.

Deploying and installing agents on Macintosh devices that do not use Secure Shell (SSH)

To place agents on Macintosh devices that do not have Secure Shell (SSH) turned on, you will need to decide on an alternate deployment method, such as:

  • Accessing the agent from LDLogon/Mac using a Web browser and e-mailing the configuration package to users.
  • Putting the configuration package on a CD or other removable media and taking it to each Macintosh device.

Deploying agent configurations for Macintosh devices

Use the Agent configuration tool to create and update (replace) custom configurations for your Macintosh devices. You can create different configurations for your specific needs, such as changing inventory scanner settings, remote control permissions, or what network protocols the agents use.

In order to push a configuration to devices, you need to create or update an agent configuration and then schedule the task.

Create or update the agent configuration

Set up specific configurations for your devices. Don't use parentheses in your Macintosh agent configuration names. Parentheses in the name will cause the deployment task to fail.

To create an agent configuration for Macintosh devices
  1. Click Tools > Configuration > Agent configuration.
  2. Select a configuration group (My configurations or Public configurations). On the toolbar, click the New agent configuration button > New Mac agent configuration.
  3. Complete the options in the Agent configuration dialog box. For more information, see Using the Macintosh agent configuration dialog.
  4. Click Save.
To update an agent configuration
  1. Click Tools > Configuration > Agent configuration.
  2. Right-click the agent configuration to be updated and select Properties.
  3. Make the updates to the agent configuration.
  4. Click Save.

Schedule the agent configuration

You can push agent configurations to devices that have the standard Ivanti agent installed. Use the Scheduled tasks tool to deploy your new or updated agent configuration.

To schedule an agent configuration for Macintosh devices
  1. Click Tools > Configuration > Agent configuration.
  2. Right-click the agent configuration to be scheduled and select Schedule agent deployment.
  3. From the network view, drag devices, groups, or queries onto the task to target devices for the task.
  4. Select the task, click the Properties button on the toolbar, and schedule a time to start the task.
Manually running agent configurations for Macintosh devices

You can manually run agent configurations for Macintosh devices once they have been created or updated. When you create an agent configuration, the following file is created in the LDLogon/Mac folder on your core server:

  • <agent configuration name>.mpkg.zip

The LDLogon/Mac folder is a Web share and should be accessible from any browser. Follow the instructions for installing the agent (see Manually running agent configurations for Macintosh devices), but insert your agent configuration file name instead of the default file name.

Uninstalling Macintosh agents

To uninstall Macintosh agents, run uninstallmacagent.sh from \\<core>\ldmain.

 


Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other