Systems Deployment with Blast Image Config 3.0

Transcription

1 Systems Deployment with Blast Image Config 3.0 May 3, 2012 Justin Elliott Penn State University MacAdmins Conference 2012

2 Quick Audience Survey Who s new to Mac systems imaging and deployment? Who has used Blast Image Config before?

3 Overview

4 Why was BIC Developed? No full featured OS X System Deployment tools existed in Still Needed and heavily used today by Penn State and others Yes, DeployStudio is another great option. ;-) (Mac OS X 10.2)

5 Background First version developed in 2003 Used at Penn State University to image all 700+ CLC Managed Macs since Mac OS X Used by many system admins in industry and education Critical tool for future internal Penn State Mac deployment projects

6 BIC s Goals Easy to learn and deploy Erase and quickly restore OS X system images Configure network settings Portable, self-contained ASR No servers required Streamlined automation

7 Intended Users Mac System Admins Computer Lab Admins Field Techs IT Staff

8 Computer Life Cycle Usage When is BIC useful? Erase and restore new Macs Company Golden/Master Image, InstaDMG Base Images Retiring Macs Erase Firmware Security Secure Erase Mac s HD

9 System Requirements Any Intel Mac running 10.6 or later, including 10.7 For and G4/G5 based Macs, use BIC v2.9 System Disk Image (.dmg) Bootable OS X Volume And a Mac to restore to...

10 Getting Started

11 Install Login as Admin User Download from clc.its.psu.edu/bic Drag and drop to /Applications

12 Add System Disk Image Create master system disk image (.dmg) bicdiskimages Copy to the RestoreImages Folder

13 Basic Run Demo Bootable FireWire Hard Drive OS X Lion, BIC v3.0a2, Master System Image Easy to set up, no servers required Fast Restores...

14 WorkFlows

15 Workflows Manager Manages list of all workflows Lab, Kiosk, Secure Erase, etc.

16 Workflows Manager The WorkFlows.xml file in the WorkFlows folder

17 Adding WorkFlows Edit the WorkFlows.xml file, Add the <Workflow>... </Workflow> entry for each workflow you need

18 Examples of Use Use same base image, customize critical settings Enable AppleSetupDone, Cleanup, post-install packages, reports, Install Radmind Certs, etc. Retiring Macs Secure Erase, Erase Firmware Security

19 WorkFlow Configs

20 WorkFlows Automation WorkFlows provide default settings to run with: Lab, Kiosk, Staff, Faculty, etc. Default system image Network Settings Total of 47 settings Stored in WorkFlowConfigs folder

21 WorkFlows Demo

22 WorkFlows Online Documentation

23 Firmware Security

24 Apple s New Requirements Macs built after mid 2011 require previous firmware password to change it (if previously enabled) This is a requirement of Apple, not BIC. Cannot reset Firmware Password with old methods! Ie: Remove RAM, Reset PRAM The OFPW tool will no longer work, you will need to install...

25 Apple s setregproptool Does the heavy lifting in Apple s Firmware Password Utility Configures Firmware Security Modes

26 Install setregproptool Download Install Mac OS X Lion.app Run the setregproptool-install.pl script included with BIC Docs for 10.6 Available too Install Demo...

27 Firmware Passwords Editor New app Included with BIC v3.0 Used to manage old firmware passwords Securely stores firmware passwords in encrypted SQLite3 DB File Demo...

28 Autorun

29 Autorun Benefits Enables BIC to launch and not prompt for admin password at launch time Enables BIC to decrypt the firmware password DB Greatly speeds up the restore process

30 Autorun Requirements Store Admin User s Password in KeyChain

31 Autorun Requirements Add AUTO_RUN=YES to your WorkFlow

32 Deployment Methods

33 Using BIC in Deployments Add to admin account Login Items Firewire Disks USB Flash Drives NetBoot Master Image Edit your workflows (Lab, Kiosk, etc.) Restore from local disks, AFP, SMB, HTTP, or ASR multicast server

34 Automount Server Demo

35

36 Tips and Tricks Works great with NetBoot Enable FileVault on portable build drives Use compressed Disk Images for fastest restores Use read-only images for ASR multicast server! Review BIC run logs for more info Read the extensive online BIC docs, they will help, I promise :-)

37 Support Subscribe to the BIC List! Apple s system imaging PDF Doc for 10.6 Server is still useful SystemImage_v10.6.pdf

38 Future Development GUI app for editing workflows Supporting Mountain Lion New features based on needs of PSU and you! Consider joining the Blast Image Config discussion list to ask questions, hear about direction and provide feedback on future design:

39 Summary Easy to learn and use on first run Easy to extend and customize Streamlined and fast!

40 Q & A Justin Elliott jelliott [at] psu.edu