UMIACS - User contributions [en]

Jamf

2026-08-20T19:39:16Z

Nventura:

= Jamf macOS Enrollment Guide =

This guide details the process for enrolling macOS devices into Jamf to maintain compliance with DIT and UMIACS standards, as well as updating the hostname via the command line.

'''Note: The Mac must be actively connected to the network (Ethernet or eduroam).'''

== Step-by-Step Enrollment Process ==

# '''Set Computer Name:'''
#* Open '''System Settings'''
#* Navigate to '''General''' -> '''About'''.
#* Edit the '''Name''' field to match the standard convention: <code><USERNAME>lap00</code>
# '''Access the Jamf Portal:'''
#* Open '''Safari''' and go to: [https://jss.umd.edu:8443/enroll https://jss.umd.edu:8443/enroll]
#* Log in with your '''@umd.edu''' email address and authenticate via Duo MFA.
# '''Initiate Download:'''
#* Click '''Enroll''' on the "Assign to user" page.
#* Click '''Continue'''.
#* If prompted by Safari to allow downloads from the Jamf site, click '''Allow''' (and click '''OK''' on any follow-up popups).
# '''Install MDM Profile:'''
#* Open '''System Settings'''
#* Navigate to '''General''' -> '''Device Management''' (or click '''Profile Downloaded''' at the top if it appears).
#* Double-click the '''UMD MDM Profile''' in the downloaded section.
#* Click '''Install''' (and confirm by clicking '''Install''' again if prompted).
#* When prompted, enter your local admin password to authorize enrollment.
# '''Log Out:'''
#* Return to Safari and select '''Log Out''' when prompted to complete the session.

AddingUMIACSCertificateAuthority

2026-08-17T17:42:27Z

Nventura:

===Introduction===

When you visit webpages encrypted with SSL, you may be presented with a warning about the site's security certificate not being trusted. These are normally important screens to pay attention to on the internet as a whole and UMIACS goes to great lengths to maintain a secure environment for our users. There are rare times where we may use our own internal certificate authority (CA) instead of a third-party one with wider trust to issue a site's certificate, to keep costs down. If you want to add this CA's root certificate ahead of time, follow these steps to import it based on your preferred web browser.

===Windows===

For most Windows browsers (Chrome, Firefox, Edge and Internet Explorer), certificate authorities are handled by Windows itself. These are the steps required to accept the certificate:

* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
* Open the file and click "Install Certificate".
*; [[File:UMIACSCA1.png|alt=Screenshot of Windows menu highlighting the "Install Certificate" button]]]
* In the dialog box opened, click "Next".
* Choose "Place all certificates in the following store".
* Choose "Browse", in the dialog box opened, Choose "Trusted Root Certification Authorities" and click "Ok".
*; [[File:UMIACSCA2.png|alt=Screenshot of Windows highlighting indicated fields in instructions]]]
* Click "Next" and then "Finish".
* If you get a Security Warning asking if you want to install this certificate, click "Yes".
*; [[File:UMIACSCA3.png|alt=Screenshot of Windows highlighting indicated fields in instructions]]]
* You should receive a success message similar to the following:
*; [[File:UMIACSCA4.png|alt=Screenshot of expected success message in Windows]]
* You may need to restart your browser for the change to take effect.

===Safari and Google Chrome (macOS)===

For most macOS browsers (excluding Firefox), certificate authorities are handled by macOS itself. This process requires administrator access. If you do not have administrator access and you are using a UMIACS-supported Mac, please contact [[HelpDesk|Staff]]. Otherwise, here are the steps required to accept the certificate:

* Click [https://wiki.umiacs.umd.edu/umiacs/images/7/7d/CA-cert.crt UMIACS Certificate Authority] to download the file.
* Open Keychain Access (Located in the Others group in Launchpad)
* Go to the Systems > Certificates
* Open the UMIACS Certificate Authority file by double-clicking it (should be located in your downloads folder).
* Enter your administrator password or use your fingerprint on the dialog box that appears.
[[Image:KeychainAcces3.png|500px|alt=Screenshot of MacOS menu displaying the dialog box requiring authentication]]
* Right-click the certificate that was just added and select the "Get Info" section.
[[Image:KeychainAccess2.png|500px|alt=Screenshot of MacOS showing the results of right clicking the certificate]]
* Select "Always Trust" option in the "When using this certificate" dropdown ("Trust" > "When using this certificate" > "Always Trust")
* Close the certificate and keychain access window.
* Enter the administrator credentials to add this certificate for all users of the system
[[Image:KeychainAccess3.png|500px|alt=Screenshot of MacOS menu to enter administrator credentials]]
* You may need to restart your browser for the change to take effect.

===Other Browsers (Unix)===

If you are using a browser other than Firefox in Unix, the process is more complicated than the above methods and may depend on your particular Unix distribution. If you need assistance with this please contact [[HelpDesk|UMIACS Staff]].

File:KeychainAcces3.png

2026-08-17T17:40:19Z

Nventura:

MacOSPrinting

2026-08-17T17:27:30Z

Nventura:

__NOTOC__
We support printing from user managed macOS 15.x or later machines.

'''Note: You must be on a UMIACS network directly or connected to the [[VPN]] in order to print.'''

=System Settings=
To start, open your System Settings from the Dock or Applications folder. Once you have opened it, click '''Printers & Scanners'''.

[[Image:TahoePrint00.png|500px |alt=Screenshot of Printers & Scanners in System Settings showing indicated field]]

=Print & Fax=
On the '''Printers & Scanners''' page, create a new local printer by clicking the '''Add Printer, Scanner, or Fax...''' button that is below the printer list.

=Add Printer=
This will bring up the Add Printer dialog.

'''Note:''' If you just want basic printing, use the steps below. If you would like to enable all the advanced options for the printer, jump over this section to '''"Enabling Advanced Printer Options"'''.

* Jump over to the '''IP''' tab
* Set Protocol to '''Internet Printing Protocol - IPP'''
* Set Address to '''print.umiacs.umd.edu'''
* Set the Queue to printers/queue; in this example for cps432-3208 it would be '''printers/cps432-3208'''. You have to make sure the queue is prefixed by '''printers/'''. For clarification, the queue is typically the printer name.
* Set Name to the name of the printer you are trying to use. This makes it easily Identifiable in your list of printers.
* It will always select '''Generic Postscript Printer'''. If you need to access the more advanced features of a queue/printer or you were '''not able to print by choosing Generic Postscript Printer''', you will need to take extra steps, please see the Advanced section at the bottom of this page.
* Select Add
* You will be asked about enabling duplex. If you know the printer has the option, which is true for most of our printers, go ahead and enable it. Then hit OK. If you're not sure, just leave it disabled. You can always enable it after the queue is added.
You should now be able to print to this printer/queue from any macOS print menu.

[[Image:TahoePrint01.png|600px|alt=Screenshot of Add Printer and inputs from the indicated field]]

=Enabling Advanced Printer Features=
Some printers may have features not accessible with the default drivers provided above. If this is the case, follow the guide below to identify, and install your print drivers from their manufacturer.

'''Note:''' If you already installed the printer with generic drivers, you will need to highlight the printer and click '''-''', before attempting to add it again. You may also need a system update to get the latest drivers from Apple, if your printer does not have software drivers listed in the next steps.

'''Step 1:''' Locate your printers name and search for its Make and Model here: http://print.umiacs.umd.edu/printers/

'''Step 2:''' Follow the '''Add Printer''' steps above until you get to '''Generic Postscript Printer'''. Select '''Software''', then '''Add'''.

[[Image:TahoePrint02.png|600px|alt=Screenshot of Add Printer showing indicated field]]

'''Step 3:''' A window labeled "Printer Software" will now pop up. Scroll through the list to find your specific make and model of printer. Click on it, and hit Ok.

[[Image:TahoePrint03.png|600px|alt=Screenshot of Printer Software showing indicated field]]

'''NOTE''': If you cannot find the printer's make and model and need Advanced Printing Features, try downloading HP Easy Admin from HP's [https://support.hp.com/ph-en/document/c06164609| website]. After, enter the model of the printer, for instance "HP LaserJet Enterprise Flow MFP M633z", then download the software. Lastly, try reinstalling the printer from step 1.

'''Step 4:''' Click Add on the next window and it should install your printer's software suite. You should have a list of options (if they are available) that looks similar to this:

[[Image:TahoePrint04.png|600px|alt=Screenshot of Setting up `printer name` pop up and options]]

'''Final Step:''' Enable the Options you wish to use, Click '''OK'''. You should now be able to print to this printer/queue from any macOS print menu.

=Printing With Stapler=
For print jobs using the stapler, follow the guide below. Printers with staplers are located in Iribe, in rooms 3149, 3208, 4149, 4208, and 5208.

To add/ connect to a printer with stapling capabilities:

'''Step 1:''' Follow the "Enabling Advanced Printer Features" guide until you reach Step 4.

'''Step 2:''' In the window that appears labeled "Setting up [your printer name]" set "HP 3-Bin Stapler/Stacker" to "Mailbox Mode".

[[Image:Mailbox_Mode2.png|500px |alt=Screenshot of "Setting up [your printer name] pop up showing indicated field|]]

'''Step 3:''' Select "OK" in the bottom right corner.

'''To Print:''' To complete the print job using the stapler once the printer has been added:

'''Step 1:''' In Preview, when trying to print, select the "Printer Options" dropdown.

[[Image:Show_Settings2.png|500px |alt=Screenshot of Show Settings showing indicated field]]

'''Step 2:''' In the dropdown, select "Finishing" by clicking the small info (i) icon.

[[Image:Finishing2.png|500px |alt=Screenshot of check on "Printer Features System" following indicated field]]

'''Step 3:''' Click "Staple" dropdown list.

[[Image:Staple3.png|500px |alt=Screenshot of a check next to "Finishing" in "Featured Sets" following indicated field]]

'''Step 4:''' Select your preferred staple option and click "Ok" when finished.

[[Image:Staple2.png|500px |alt=Screenshot of a check next to "None" for "Staple" option following indicated field]]

'''Step 5:''' Press "Print" in the bottom right corner.

=Printing Stored Jobs=
'''Pre-requisite:''' Requires [[MacOSPrinting#Enabling_Advanced_Printer_Features | advanced print features]] to be enabled.
If you are printing a sensitive document and do not want the printer to print it right away, you can configure a stored job. The stored job lets you hold a print job until you enter a PIN to release the job. You can configure a stored job following the instructions below:

# Go to File > Print or Press Command + P to open the Printer menu.
# Select the printer where you want to send the print job.
# Click the dropdown list under Printer Options and select '''Job Storage''' by clicking the small info (i) icon.
#:[[File:Printjob4.png|400px |alt=Screenshot of Print showing indicated field]]
# From the Mode dropdown list, select '''Personal Job''' (or '''Stored Job''' if you want to share the document with others).
#:[[File:Printjob5.png|400px |alt=alt=Screenshot of Print showing indicated field]]
# Leave the username to default or specify a custom username.
# Check the box '''Use PIN to Print''' and enter a 4-digit number. Hit '''Print'''.
#:[[File:Printjob6.png|400px |alt=Screenshot of Print showing indicated field]]

'''To print the stored jobs:'''
# From the Home screen of the printer tap on '''Print from Job Storage''' (or '''Print''' > '''Print from Job Storage''').
# In the '''Stored Job to Print''' screen, select the name of the folder where the job is stored. By default, the name of the folder will be your username unless you customized it earlier.
# Select the name of the document and enter the PIN.
# Hit '''Print'''.

File:Printjob4.png

2026-08-17T17:25:32Z

Nventura:

File:Printjob5.png

2026-08-17T17:24:08Z

Nventura:

File:Printjob6.png

2026-08-17T17:23:09Z

Nventura:

MacOSPrinting

2026-08-17T17:19:55Z

Nventura:

__NOTOC__
We support printing from user managed macOS 15.x or later machines.

'''Note: You must be on a UMIACS network directly or connected to the [[VPN]] in order to print.'''

=System Settings=
To start, open your System Settings from the Dock or Applications folder. Once you have opened it, click '''Printers & Scanners'''.

[[Image:TahoePrint00.png|500px |alt=Screenshot of Printers & Scanners in System Settings showing indicated field]]

=Print & Fax=
On the '''Printers & Scanners''' page, create a new local printer by clicking the '''Add Printer, Scanner, or Fax...''' button that is below the printer list.

=Add Printer=
This will bring up the Add Printer dialog.

'''Note:''' If you just want basic printing, use the steps below. If you would like to enable all the advanced options for the printer, jump over this section to '''"Enabling Advanced Printer Options"'''.

* Jump over to the '''IP''' tab
* Set Protocol to '''Internet Printing Protocol - IPP'''
* Set Address to '''print.umiacs.umd.edu'''
* Set the Queue to printers/queue; in this example for cps432-3208 it would be '''printers/cps432-3208'''. You have to make sure the queue is prefixed by '''printers/'''. For clarification, the queue is typically the printer name.
* Set Name to the name of the printer you are trying to use. This makes it easily Identifiable in your list of printers.
* It will always select '''Generic Postscript Printer'''. If you need to access the more advanced features of a queue/printer or you were '''not able to print by choosing Generic Postscript Printer''', you will need to take extra steps, please see the Advanced section at the bottom of this page.
* Select Add
* You will be asked about enabling duplex. If you know the printer has the option, which is true for most of our printers, go ahead and enable it. Then hit OK. If you're not sure, just leave it disabled. You can always enable it after the queue is added.
You should now be able to print to this printer/queue from any macOS print menu.

[[Image:TahoePrint01.png|600px|alt=Screenshot of Add Printer and inputs from the indicated field]]

=Enabling Advanced Printer Features=
Some printers may have features not accessible with the default drivers provided above. If this is the case, follow the guide below to identify, and install your print drivers from their manufacturer.

'''Note:''' If you already installed the printer with generic drivers, you will need to highlight the printer and click '''-''', before attempting to add it again. You may also need a system update to get the latest drivers from Apple, if your printer does not have software drivers listed in the next steps.

'''Step 1:''' Locate your printers name and search for its Make and Model here: http://print.umiacs.umd.edu/printers/

'''Step 2:''' Follow the '''Add Printer''' steps above until you get to '''Generic Postscript Printer'''. Select '''Software''', then '''Add'''.

[[Image:TahoePrint02.png|600px|alt=Screenshot of Add Printer showing indicated field]]

'''Step 3:''' A window labeled "Printer Software" will now pop up. Scroll through the list to find your specific make and model of printer. Click on it, and hit Ok.

[[Image:TahoePrint03.png|600px|alt=Screenshot of Printer Software showing indicated field]]

'''NOTE''': If you cannot find the printer's make and model and need Advanced Printing Features, try downloading HP Easy Admin from HP's [https://support.hp.com/ph-en/document/c06164609| website]. After, enter the model of the printer, for instance "HP LaserJet Enterprise Flow MFP M633z", then download the software. Lastly, try reinstalling the printer from step 1.

'''Step 4:''' Click Add on the next window and it should install your printer's software suite. You should have a list of options (if they are available) that looks similar to this:

[[Image:TahoePrint04.png|600px|alt=Screenshot of Setting up `printer name` pop up and options]]

'''Final Step:''' Enable the Options you wish to use, Click '''OK'''. You should now be able to print to this printer/queue from any macOS print menu.

=Printing With Stapler=
For print jobs using the stapler, follow the guide below. Printers with staplers are located in Iribe, in rooms 3149, 3208, 4149, 4208, and 5208.

To add/ connect to a printer with stapling capabilities:

'''Step 1:''' Follow the "Enabling Advanced Printer Features" guide until you reach Step 4.

'''Step 2:''' In the window that appears labeled "Setting up [your printer name]" set "HP 3-Bin Stapler/Stacker" to "Mailbox Mode".

[[Image:Mailbox_Mode2.png|500px |alt=Screenshot of "Setting up [your printer name] pop up showing indicated field|]]

'''Step 3:''' Select "OK" in the bottom right corner.

'''To Print:''' To complete the print job using the stapler once the printer has been added:

'''Step 1:''' In Preview, when trying to print, select the "Printer Options" dropdown.

[[Image:Show_Settings2.png|500px |alt=Screenshot of Show Settings showing indicated field]]

'''Step 2:''' In the dropdown, select "Finishing" by clicking the small info (i) icon.

[[Image:Finishing2.png|500px |alt=Screenshot of check on "Printer Features System" following indicated field]]

'''Step 3:''' Click "Staple" dropdown list.

[[Image:Staple3.png|500px |alt=Screenshot of a check next to "Finishing" in "Featured Sets" following indicated field]]

'''Step 4:''' Select your preferred staple option and click "Ok" when finished.

[[Image:Staple2.png|500px |alt=Screenshot of a check next to "None" for "Staple" option following indicated field]]

'''Step 5:''' Press "Print" in the bottom right corner.

=Printing Stored Jobs=
'''Pre-requisite:''' Requires [[MacOSPrinting#Enabling_Advanced_Printer_Features | advanced print features]] to be enabled.
If you are printing a sensitive document and do not want the printer to print it right away, you can configure a stored job. The stored job lets you hold a print job until you enter a PIN to release the job. You can configure a stored job following the instructions below:

# Go to File > Print or Press Command + P to open the Printer menu.
# Select the printer where you want to send the print job.
# Click the dropdown list under Copies & Pages and select '''Job Storage'''.
#:[[File:Step03.png|400px |alt=Screenshot of Print showing indicated field]]
# From the Mode dropdown list, select '''Personal Job''' (or '''Stored Job''' if you want to share the document with others).
#:[[File:Step04.png|400px |alt=alt=Screenshot of Print showing indicated field]]
# Leave the username to default or specify a custom username.
# Check the box '''Use PIN to Print''' and enter a 4-digit number. Hit '''Print'''.
#:[[File:Step06.png|400px |alt=Screenshot of Print showing indicated field]]

'''To print the stored jobs:'''
# From the Home screen of the printer tap on '''Print from Job Storage''' (or '''Print''' > '''Print from Job Storage''').
# In the '''Stored Job to Print''' screen, select the name of the folder where the job is stored. By default, the name of the folder will be your username unless you customized it earlier.
# Select the name of the document and enter the PIN.
# Hit '''Print'''.

File:Staple3.png

2026-08-17T17:15:22Z

Nventura:

File:Staple2.png

2026-08-17T17:13:11Z

Nventura:

File:Finishing2.png

2026-08-17T17:06:32Z

Nventura:

File:Show Settings2.png

2026-08-17T17:04:43Z

Nventura:

File:Mailbox Mode2.png

2026-08-17T17:02:38Z

Nventura:

Creating service admin user on macOS

2026-08-13T17:05:27Z

Nventura:

When taking an Apple product to the [https://it.umd.edu/terrapin-tech Terrapin Tech store], it is critical that you create a Service Admin User on your computer before having it serviced. The technicians at the store require an admin user name and password, and if the pre-existing password is the same as your UMD passphrase, revealing it to the technicians would represent a security vulnerability. To remedy this, you must create a new temporary user account with administrator privileges that the technicians can use to service your machine.

==Creating the new account==
* Make sure you are logged in to an administrator account on your MacBook.
# Navigate to System Preferences. (Click on the Apple Logo at the top lefthand side of the screen, and select "System Preferences" from the dropdown menu.)
# From the System Preferences menu, select "Users and Groups" .
# On the righthand side of the screen where it lists the users currently on the machine, click on the 'Add User' button.
# By default, the new account will be set to a Standard account. Select the "New User" dropdown menu and choose "Administrator" from the list.
#: [[Image:AdminTahoe1.png|400px |alt=Screenshot of pop up to Create User following indicated prompt]]
# The new user's full name should be "Service Admin," and the account name should be "serviceadmin".
# The password is up to you, so long as it's not the same as your UMD passphrase.
#: [[Image:AdminTahoe.png|400px |alt=Screenshot of pop up to Create User following indicated prompt]]
# Select "Create User".

When prompted by the Terrapin Tech store, you should give this account's credentials to the technician, '''not''' your UMD account credentials. Once the service is completed, the account can be deleted.

File:AdminTahoe.png

2026-08-13T17:05:07Z

Nventura:

File:AdminTahoe1.png

2026-08-13T17:01:59Z

Nventura:

Jamf

2026-08-13T16:45:16Z

Nventura:

Jamf

2026-08-13T16:44:17Z

Nventura: Created page with "= Jamf macOS Enrollment Guide = This guide details the process for enrolling macOS devices into Jamf to maintain compliance with DIT and UMIACS standards, as well as updating the hostname via the command line. '''Note: The Mac must be actively connected to the network (Ethernet or eduroam).''' == Step-by-Step Enrollment Process == # '''Set Computer Name:''' #* Open '''System Settings''' #* Navigate to '''General''' -> '''About'''. #* Edit the '''Name''' field to mat..."

= Jamf macOS Enrollment Guide =

This guide details the process for enrolling macOS devices into Jamf to maintain compliance with DIT and UMIACS standards, as well as updating the hostname via the command line.

'''Note: The Mac must be actively connected to the network (Ethernet or eduroam).'''

== Step-by-Step Enrollment Process ==

# '''Set Computer Name:'''
#* Open '''System Settings'''
#* Navigate to '''General''' -> '''About'''.
#* Edit the '''Name''' field to match the standard convention: <code><USERNAME>lap00</code>
# '''Access the Jamf Portal:'''
#* Open '''Safari''' and go to: [https://jss.umd.edu:8443/enroll https://jss.umd.edu:8443/enroll]
#* Log in with your approved '''@umd.edu''' email address and authenticate via Duo MFA.
# '''Initiate Download:'''
#* Click '''Enroll''' on the "Assign to user" page.
#* Click '''Continue'''.
#* If prompted by Safari to allow downloads from the Jamf site, click '''Allow''' (and click '''OK''' on any follow-up popups).
# '''Install MDM Profile:'''
#* Open '''System Settings'''
#* Navigate to '''General''' -> '''Device Management''' (or click '''Profile Downloaded''' at the top if it appears).
#* Double-click the '''UMD MDM Profile''' in the downloaded section.
#* Click '''Install''' (and confirm by clicking '''Install''' again if prompted).
#* When prompted, enter your local admin password to authorize enrollment.
# '''Log Out:'''
#* Return to Safari and select '''Log Out''' when prompted to complete the session.

== Post-Enrollment: Changing Hostname ==

To update or standardize a computer's hostname in Jamf after enrollment, open '''Terminal''' on the Mac and run the <code>sudo jamf setComputerName -name <USERNAME>lap00</code> command.

OSSupport

2025-09-08T15:56:05Z

Nventura:

UMIACS supports the following Operating Systems:

==Linux==
* Red Hat Enterprise Linux 8
* Red Hat Enterprise Linux 9

==[[Windows]]==
* [[Windows Activation | Windows 10]] ([https://learn.microsoft.com/en-us/lifecycle/products/windows-10-enterprise-and-education EOL October 2025])
* [[Windows Activation | Windows 11]]
* Windows Server 2016 and later

==macOS==
* macOS 15.x