Systems Deployment with Blast Image Config. May 22, 2013 Justin Elliott Penn State University

Transcription

1 Systems Deployment with Blast Image Config May 22, 2013 Justin Elliott Penn State University

2 Quick Audience Survey Who s new to Mac systems imaging and deployment? Who has used Blast Image Config before?

3 Overview

4 Why was BIC Developed? No full featured OS X System Deployment tools existed in Required and heavily used today by Penn State, Higher-Ed and Industry Yes, DeployStudio is another great option! ;-) (Mac OS X 10.2)

5 Background First version developed in 2003 Used at Penn State University to image all 700+ CLC Managed Macs (Mac OS X OS X ) Used by many system admins in industry and education Critical tool for future internal Penn State Mac deployment projects (Mac CLM)

6 BIC s Goals Easy to learn and deploy Erase and quickly restore OS X system images Configure network settings Portable, self-contained ASR No servers required Streamlined automation

7 Intended Users Mac System Admins Computer Lab Admins Field Techs IT Staff

8 Computer Life Cycle Usage When is BIC useful? Erase and restore new Macs Company Golden/Master Image, InstaDMG Base Images Retiring Macs Erase Firmware Security Secure Erase Mac s HD

9 System Requirements Any Intel Mac running 10.6 or later, including For and G4/G5 based Macs, use BIC v2.9 System Disk Image (.dmg) And a Mac to restore to

10 Getting Started

11 Install Login as Admin User Download from clc.its.psu.edu/bic Drag and drop to /Applications

12 Add System Disk Image Create master system disk image (.dmg) bicdiskimages Copy to the RestoreImages Folder

13 Manual Run Demo Bootable FireWire Hard Drive OS X , BIC v3.1.2, Master System Image Easy to set up, no servers required Fast Restores Demo Video...

14

15 WorkFlows

16 Workflows BIC displays all available workflows at first launch

17 Workflows Manager v1.0 Available Q Manage and edit all workflows Lab, Kiosk, Secure Erase, etc.

18 Workflows Manager v1.0 GUI Options for all stages Restore System Image Options

19 Workflows Master List The WorkFlows.xml file in the WorkFlows folder

20 Adding WorkFlows Edit the WorkFlows.xml file, Add the <Workflow>... </Workflow> entry for each workflow you need

21 Examples of Use Use same base image, customize critical settings Enable AppleSetupDone, Cleanup, post-install packages, reports, Restore Recovery volume, etc. Retiring Macs Secure Erase, Erase Firmware Security

22 WorkFlow Configs

23 WorkFlows Automation WorkFlows provide default settings Default system image Network Settings Total of 47 settings Stored in WorkFlowConfigs folder

24 WorkFlows Online Documentation

25 Firmware Security

26 Apple s New Requirements Macs built after mid 2011 require previous firmware password to change it (if previously enabled) This is a requirement of Apple, not BIC. Cannot reset Firmware Password with old methods! Ie: Remove RAM, Reset PRAM The OFPW tool will no longer work, you will need to install...

27 Apple s setregproptool Does the heavy lifting in Apple s Firmware Password Utility Configures Firmware Security Modes

28 Installing setregproptool Download Install OS X Mountain Lion.app Run the setregproptool-install.pl script included with BIC v Docs for 10.6, 10.7, and 10.8 Install demo...

29

30 Firmware Passwords Editor Included with BIC v3.1.2 Used to edit previously used firmware passwords Securely stores firmware passwords in encrypted SQLite3 DB File

31 Autorun

32 Autorun Benefits Enables BIC to launch and not prompt for admin password at launch time Enables BIC to decrypt the firmware password DB Greatly speeds up the restore process

33 Autorun Requirements Store Admin User s Password in KeyChain

34 Autorun Requirements Add AUTO_RUN=YES to your WorkFlow

35 Autorun Demo

36

37 Deployment Methods

38 Using BIC in Deployments Add to admin account Login Items Firewire, ThunderBolt Disks USB Flash Drives NetBoot Master Image Edit your workflows (Lab, Kiosk, etc.) Restore from local disks, AFP, SMB, HTTP, or ASR multicast server

39 Tips and Tricks Works great with NetBoot Use FileVault on build drives Use compressed Disk Images for fastest restores Use read-only images for ASR multicast server! Review BIC run logs for more info

40 Support BIC Docs Support List Apple

41 Future Development WorkFlows Editor v1.0 in Q Support next major version of OS X New features based on needs of PSU and you! Critical for Penn State

42 Summary No server required Easy to learn and use on first run Easy to extend and customize Can be fully automated Streamlined and fast restores

43 Q & A Justin Elliott jelliott [at] psu.edu