Inhaltsverzeichnis

MacBook Pro M1

Requirements

Specs

MacBook Pro M1
Apple M1 8-core CPU
16 GB LPDDR-3 RAM
500 GB NVMe SSD
13,3„ Display

MacOS Monterey
Version 12.1

Basic Setup

Die Basiskonfiguration muss nur bei neuen MacOSX-Rechner/Laptos
oder nach dem Zurücksetzen auf die Werkseinstellungen erfolgen. 

Language: English <Return>
Select Your Country or Region: Deutschland <Continue>
Written and Spoken Languages <Continue>
  Prefered languages: English (Germany)
  Input Soruces: German
  Dictation: English (United Kingdom)
<Continue>
Accessibility <Not Now>
Select Your Wi-Fi Network: <Continue (without choice)>
  Are you sure yo don't want to set up Wi-Fi? <Continue>
Data & Privacy <Continue>
Migration Assistant: <Not Now>
Terms and Conditions: <Agree>
  I have read and agree to ... <Agree>
Create a Computer Account
  Full name: Admin
  Account name: admin
  Password: <std_pwd>
  Hint: <none>
  <Continue>
Enable Location Services
  [ ] Enable Location Services on this Mac
  <Continue>
    Are you sure ...? <Don't Use>
Select Your Time Zone
  Berlin - Germany
  <Continue>
Analystics
  [ ] Share Mac Analytics with Apple
  [ ] Share crash and ...
  <Continue>
Screen Time
  <Set Up Later>
Siri
  [ ] Enable Ask Siri
  <Continue>
Touch ID
  <Set Up Tocuh ID Later>
    Are you sure ...? <Continue>
Choose Your Look
  Light 
  <Continue>

Networking

System Update

root-User

Apple Menu | System Preferences | Users & Groups | Login Options | <Click the lock to make changes.>
  Network Account Server: <Join...> | <Open Directory Utility...> | <Click the lock to make changes.>
    <Edit in Menubar> | <Enable Root User> | 
      Password: <std_pwd>

DFN-Certificates

  - Zertifikate herunterladen unter: https://pki.pca.dfn.de/dfn-ca-global-g2/cgi-bin/pub/pki
    - Wurzelzertifikat
    - DFN-PCA-Zertifikat
    - DFN-CA Global G2 Zertifikat
  - Finder | Downloads | <Zertifikate durch Doppelklick hinzufügen> | 
    - Keychain: System | <Add>
  - die drei Zertifikate unter Downloads können nach dem Hinzufügen gelöscht werden

Authorized Keys

su - root
scp ltspmaster.physik.privat:.ssh/authorized* ~/.ssh

checkmk Integration

Homebrew installation

su - admin
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> /Users/admin/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"

brew install coreutils

FileVault activation

Apple Menu | System Preferences... | Security & Privacy
  <FileVault>
  <Click the lock to >
  <Turn On File Vault>
  <Create Recovery Key>

Put Recovery Key in Keepass
Der Key liegt aktuell noch in meinem persönlichen (mbeh) Keepass

User Setup

System Preferences | Users & Groups | <Click the log to make changes> | <+>
  New Account: Administrator
  Full Name: Dominik Lentrodt
  Account Name: dominik
  Password: <keepassxc_mbeh>
  Password hint: <none>

Software

Sophos

su - root
cd /Users/Sophos-Endpoint-osx/Sophos\ Installer.app/Contents/MacOS/tools
sudo ./InstallationDeployer --install
Allow Sophos "Full Disk Access"

Apple Menu | System Preferences... | Securtiy & Privacy
  <Click the lock to make changes.>
  Full Disk Access 
    <Drag Sophos Icon to application list>

Thunderbird

Browser: https://thunderbird.net | <Free Download>
Downloads | <Open in Finder> | Thunderbird*.dmg <double click> | 
<open> Applications | Thunderbird-Icon <drag to Applications>
Thunderbird*.dmg <Move to Bin> | <close all windows>

Mathematica

Browser: http://www.software.physik.uni-freiburg.de/Mathematica/Mathematica_12.3.1_MAC.dmg 
Downloads | <Open in Finder> | Mathematica_12.3.1_MAC.dmg 
  Applications <click to open> | Mathematica_12.3.1_MAC <drag to Applications>
  WolframScript.pkg <double click to install>

Der Lizenzschlüssel liegt aktuell noch in meinem persönlichen (mbeh) Keepass

Time Machine

<connect external harddisk>
<rename harddisk>TM Backup
Apple | System Preferences | Time Machine | <select Backup Disk>
  <select external harddisk> 
  [+] Encrypt backup
  <Use Disk>
    Backup password: ****
    Verify password: ****
    Password hint: keepass
    <Encrypt Disk>

Put Password for Time Machine Backup in Keepass
Das Passwort liegt aktuell noch in meinem persönlichen (mbeh) Keepass

see: https://support.apple.com/en-us/HT201250

Free File Sync

:TO-DO:

Garantie Prüfen

<apple> | <About This Mac> | 

Serial Nubmer: <select and copy>
<Support> | <Check Your Coverage...>
  Enter your serial number: <paste>
  <enter code> | <Continue> 
    (+) Valid Purchase Date
    (+) Telephone Technical Support: Active
    (+) Coverd by Apple Care Protection Plan
        Coverage end date: ~ <current date> + 5 Years

Inventarisierung

GLPI Eintrag

Checkout Sheet

Zusammen mit dem Benutzer