On macOS 12 and later this uses Erase All Contents And Settings (If Bootstrap Token is escrowed). Self Service Display Name : Reset Computerĭescription : This tool issues the MDM EraseDevice command to this client. Make the policy available in Self Service : Yes
I would not recommend making this available to all users. Limitations : We limit access to two internal LDAP groups. Target Computers : We scope this to a 12.0 smart group but this could also be All Computers. JamfProURL : Set your jamfProURL here, if on premise you may need to add :8443 at the end of the URLĪPIauth : Your API User either in user:password format or ideally encoded as described above Trigger : Do not set a trigger here, we will set Self-Service as the trigger. usr/bin/curl -sS -X POST -H "Content-Type: text/xml" -u "$APIauth" "$jamfProURL/JSSResource/computercommands/command/EraseDevice/passcode/123456/id/$compId"Ĭreate a new policy with the following settingsĬategory : (dealers choice, we have a category called Internal Only) #Issue EraseDevice command to Jamf Computer ID In Settings : Computer Management : Scripts we created a new script called `EraseDevice via API` as follows #Set Jamf Pro URLĪPIauth=$(openssl enc -base64 -d /dev/null | awk -F'>|<' '//') echo $compId
JAMF PRO WIPE COMPUTER INSTALL
We have other tooling to erase and install so making this available to operating systems that are not running an EACAS compatible OS was not desirable. The EraseDevice command works on previous versions of the Operating System but will simply wipe the device and wait for reinstallation of the OS. We have a smart group targeting macOS 12. (Optional) Smart Group – Smart Group targeting macOS 12 computers. You’ll get output in a long string, and we’ll use that in Parameter 5 later on in our policy. Format your credentials as `apiuser:apipassword` and run through the terminal with `echo -n ‘apiuser:apipassword’ | openssl base64`.
JAMF PRO WIPE COMPUTER PASSWORD
(Optional) Encoded credentials – take the username and password of the api account and use openssl to convert them into a base64 string.
Jamf Pro Server URL – the URL of your Jamf server, such as ĪPI Credentials – A jamf user with the following privlidges: Create – Computers, Send Computer Remote Wipe Commandīootstrap Token – Bootstrap token is required for EraseDevice MDM command to use EACAS behavior. We make a lot of tools available via Jamf Self-Service, both to the final customer and internal to IT, so we opted to make a self service tool in our Internal Tools category that would use the EraseDevice MDM command to wipe the device. One slip of the finger and we’ve wiped the wrong device.
While our organization wanted to take advantage of the speed and ease of using EACAS we did not necessarily want to make the EraseDevice command available to all technicians in our jamf web console. You can find Apple’s public documentation on EACAS at
JAMF PRO WIPE COMPUTER MAC
If your Mac includes this feature when using macOS Monterey, use it instead of other utilities to erase your Mac. MacOS Monterey includes Erase All Content and Settings, a way to quickly and securely erase all of your settings, data, and apps, while maintaining the operating system currently installed.
0 kommentar(er)
