Remote wipe a 10.7 Mac

[rtrouton]

I've assigned the permissions on my test JSS to remote wipe (https://jamfnation.jamfsoftware.com/article.html?id=208)
, but I'm not seeing how you actually wipe a machine. Can someone point me in the right direction?

[donmontalvo]

Remote Wipe...hmmm...isn't that iOS only?

[mm2270]

Do you have an APN certificate for your JSS? Its required to use some of the management features in Lion such as these.

@Don- its a new feature in the 8.51 release for OS X machines (see pg 318 in the 8.51 Admin guide), but they need to be enrolled for management, just as you would when using Lion Configuration Profiles..

[Matt]

Remote wipe is iOS only though I guess with some brilliant scripting you could hack the Recovery Partition.

[rtrouton]

According to the Casper 8.51 release notes, 8.51 also supports remote locking/wiping Macs running 10.7.

I don't have an APN for my test JSS, so I'll get one.

[rtrouton]

Now with an APN certificate, I'm getting some new options showing up in Inventory on my Lion test box.

external image link

external image link

external image link

external image link

[Matt]

Ahh I see what you mean now. We don't have recovery partitions thats why.

[bentoms]

yep i tested this in the 8.5 beta.. works well :)

[rtrouton]

One nice thing is that I don't have any profiles running. This capability looks like it's available automatically as long as your 10.7 Macs have Recovery HD and your JSS is set up with an APN.

[donmontalvo]

Feature request...change garbage can icon to pencil eraser...LOL

[stevewood]

Interesting, I have all of the requirements met that are in the Admin Guide (page 318), but I don't get the icons. I get "MDM Managed" is yes, but no icons. Hmph.

Anyone have any ideas?

[stevewood]

Nevermind....I'm a bone head....I didn't read the requirements in the article that Rich posted and the user I was using didn't have the Remote commands privileges.

[ImAMacGuy]

How can I tell if my system has the APNs installed?
Do I need to be using config profiles to see these options on Lion systems?

[mm2270]

"Settings > Global Management Framework Settings > Push Notification Certificate"

If you don't see a certificate listed there, you don't have it uploaded.
(Unless by "system" you were referring to one of the Mac clients?)

Also, according to the notes in the admin guide, it doesn't look like you need to use Configuration profiles to get these features. Just the APN and the other settings enabled that are listed in the documentation.

[rtrouton]

For those interested, I've written a post about this:

http://derflounder.wordpress.com/2012/04/06/using-casper-8-51-to-remotely-lock-or-wipe-10-7-macs/