Nexthink Recognized by SIIA as the Best Digital Employee Experience Platform Learn more

Learn more

Learn more

cookie alert

We use cookies to offer you a better browsing experience, analyze site traffic, personalize content, and serve targeted advertisements. If you continue to use this site, you consent to our use of cookies.

Nexthink Library

macOS Content Pack

Back

macOS Content Pack

Latest Version: 5.0.0.0
|
Updated on July 13, 2023
Install

Description

This pack contains a collection of disk protection and certificate based Remote Actions, in addition to bug fixes for the macOS operating system

Versions

  • 5.0.0.0 - 13 Jul 2023 - Added "Fix launch daemons crash macOS Ventura" Remote Action
  • 4.1.1.0 - 24 May 2023 - Updated OS requirements
  • 4.1.0.0 - 22 Jul 2022 - Improved compatibility for "Get Encryption Information" Remote Action
  • 4.0.0.0 - 28 Jan 2021 - Removed Jamf-related Remote Actions
  • 3.0.0.0 - 26 Oct 2020 - Added "Get Encryption Information" Remote Action
  • 2.0.0.0 - 25 Aug 2020 - Added "Invoke Jamf Reconnect" Remote Action and updated "Get Jamf Agent Status" and "Check Certificate Validity" Remote Actions
  • 1.0.0.0 - 30 Jun 2020 - Initial release

Required Products

Nexthink Act

Platforms

MacOS Catalina and newer

Compatibility

V6.27 and later

This Might Interest You

Workflow: Windows 11 migration
New

Orchestrate the Windows 11 migration process with automated compatibility checks and pre-to-post migration user engagement.

Released on April 11, 2024
View Library Pack

Workflow: Device assignment verification
New

Orchestrate the verification and update of device assignee information in the ServiceNow Hardware Asset Management database through a dedicated workflow.

Released on April 10, 2024
View Library Pack

Check Certificate Validity

Script Description

Checks if the certificate exists in the keystore and if its expiration date is not overdue.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Certificate Name Name of the certificate to be checked, as it is identified in the macOS keystore
Days To Expire Days in the future, from current execution date, to consider a certificate as "about to be expired"

Outputs

Label Type Description
Certificate Valid Bool Indicates if the certificate is valid or expired
Certificate About To Expire Bool Indicates if the certificate is close to expiry based on the input threshold

Further Information

In the case the Certificate Name provided as input parameter matches against multiple certificates stored in macOS keystore, only the last one will be taken into consideration for validity checks.

Test Scenarios

ValidCertificateCheck
Test Case Valid certificate is checked
Environment VM macOS Mojave - macOS Mojave
Results Successful - Certificate is checked and validity is validated

Get Encryption Information

Script Description

Gets an APFS file system disk encryption and decryption information in addition to checking whether FileVault is enabled or not.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

Label Type Description
Protection Status String Indicates whether the disk is encrypted or decrypted
Encryption Method String Holds the method which was used to encrypt the disk (if applicable)
File Vault Is Enabled Bool Indicates whether FileVault is enabled or not on the device

Fix launch daemons crash macOS Ventura

Script Description

Due to a bug that is confirmed by Apple to impact macOS 13 Ventura, in certain scenarios the Nexthink Collector daemon can crash with 'Launch Constraint Violation' when rebooting the machine.This macOS bug applies to other deamons on the device also. This Remote Action can be used as a workaround to fix the bug until Apple are able to release a patch.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

None.

Further Information

This Remote Action is a workaround to fix the bug but has side-effects on the macOS device. You must in order to prevent loss of settings on the endpoint do the following.

Before running the script, manually make a note of the 'Open at login' items which are shown manually make a note of the 'Allow in Background' items which are shown as disabled

Run the Remote Action.

Perform a reboot.

Manually add the Open at Login items.

Manually disable the Allow in Background items that were disabled.

Test Scenarios

macOSdeviceWithVentura
Test Case The device has macOS 13 (Ventura).
Environment macOS 13
Results Success - Fix is launched avoiding the crash of the daemon.
macOSdeviceWithoutVentura
Test Case The device has macOS 12 or below.
Environment macOS 10.15, 11, 12
Results Failure - Exception is thrown reporting that this script must be run in macOS Ventura