Deployment Solution

Description:

This article explains the process to create a netboot network boot disk for Mac OS X.

Abbreviations

1. Create reference image

A netboot set is created from an existing Mac OS X installation, customised to exclude or include any software needed.

1. Install OS X

• Install a fresh version of Mac os X. Do not use the OS pre-loaded on a mac as those include model specific drivers and will not include needed drivers to boot other Mac models.
• You can download the latest copy of Mac OS X via the Apple App store After the install completes, run through the setup process and create an account, this account will not be used but must be created to complete the setup process.
• Update to the latest software update

Note: Vmware Fusion or any other virtualisation software is recommended for the reference image.

• Enable the root user account:
  • Press command (⌘) + Space and type ‘directory’
• Press enter
• Click the lock icon
• Type the account password and click modify Configuration
  • From the edit menu select “Enable Root User”
  • Type a password for the root account and click ok
• Log out of the current account
• On the log in page, click Other…
• Type root in the name field
• Type the password created earlier and press enter
• Configure auto login for the root account
  • Open system preferences
  • Click Users & Groups
  • Click Login Options at the bottom of the page
  • In the Automatic logon dropdown select ‘System Administrator’
  • Type the password configured earlier
• Customise the the OS to look as you want
  • Configure the screensaver not to start
  • Configure Energy settings:
    • Computer Sleep: Never
    • Don’t put HD to sleep when possible
    • Turn off display: Never
  • Configure apps to be allowed from anywhere:
    • Security and Privacy > Allow apps from anywhere
  • Configure CD & DVD : Set all actions to Ignore
  • Network > WiFi: Disable ‘Ask to join new networks’

Note: The background image will be replaced by the Symantec automation background.

• You can also remove un-needed applications and libraries, however be very careful when doing this as this can harm your system.
  • For OS X 10.11 and higher you need to disable SIP to be able to remove system applications and libraries.
• Enable Remote login and Remote management:
  • Open system preferences
  • Click sharing
  • Select ‘Remote Login’
    • Make sure ‘Allow access for: Administrators only has been configured
  • Select Remote management and select all options except for ‘Show when being observed’
  • Click ok
  • Close System Preferences
• Push the Symantec Management Agent (SMA) to the client computer, or install via the install page.
• Only install the Deployment solution plug-in with the SMA
• After the install and config updated by the SMA, disable applications from running after reboot by running the below command:
  • defaults write com.apple.loginwindow LoginWindowLaunchesRelaunchApps -bool false
• Restart the computer, de-select ‘Reopen windows when logging back in’

1. Install the MOCU app

• Copy the MOCU app from the SMP server to the Mac client
  • Located at: \\Server\NSCap\bin\unix\Deployment\Mac\universal\MocuAppInstaller
• Install the MOCU app
• Remove the .pkg file after install

1. Create Netboot Image

• Launch MOCU app
• On the first screen make sure the radio button is set to NetBoot, click next
• Enter a name for the volume
  • This name will be displayed in finder when booted into the NetBoot image.
• Click on ‘Prepare Temporary Volume’
• Once on Next
• Click ‘Launch System Image Utility’
• Select the NetBoot volume created in the previous step
• Click Next
• Click Next on the Network disk image type page
• Agree to the software license agreement
• Click Next on the add configuration Profiles page
• Click Next on the System Configuration page
• Click Next on the Directory Servers page
• Give the Network disk a name (or leave default), click next
• Select all the models to support, Click Next
• Click Next on the Filter clients page
• Select a location to save the image, Click Save
• After the process completes click Done

1. Update Netboot Image for Compatibility with SMP server

• Continued from previous section…
• Within the MOCU app select the to update from the dropdown menu
  • Browse to the location where the image was saved (.nbi folder) and select the .dmg file
  • Click Open
  • Click Update Image
  • Once done click ok
  • When prompted to update additional file in the .nbi folder, make sure to select the .nbi folder for both Target .nbi and source volume of netboot image
• Click OK
• On the Update done dialog click ok
• Close all applications

1. Create Pre-boot from NetBoot .nbi

• Copy the .nbi foler to the SMP server
• Logon to the SMP server via RDP
• Open the SMP Console
• Navigate to Settings > All Settings
• Expand Deployment and click on PreBoot Configurations
• Click on add
• Give the preboot a name
• In the operating system dropdown select Mac
  • If prompted to run java, accept and run java (required for Upload)
• Make sure the Mac Preboot Environment to upload is set to NetBoot
• Click the folder icon and select the .nbi foler
• Wait for the upload to complete, Click OK

Note: Remember to enable respond to Unknown, Predefined and Managed Computers, and select the Pre-Boot created as the boot image.