MacBook Pro M1

• Hostname: qos005
• IP-Adress: 10.5.81.121
• MAC-Adress: 00:e0:4c:d3:09:c9
• User Name: Dominik Lentrodt
• E-Mail: dominik.lentrodt@physik.uni-freiburg.de
• Account Name: dominik
• Inventarnummer: 7302148800
• Inventaraufkleber: ok
• Leiferschein: ok

Die Basiskonfiguration muss nur bei neuen MacOSX-Rechner/Laptos
oder nach dem Zurücksetzen auf die Werkseinstellungen erfolgen.

Language: English <Return>
Select Your Country or Region: Deutschland <Continue>
Written and Spoken Languages <Continue>
  Prefered languages: English (Germany)
  Input Soruces: German
  Dictation: English (United Kingdom)
<Continue>
Accessibility <Not Now>
Select Your Wi-Fi Network: <Continue (without choice)>
  Are you sure yo don't want to set up Wi-Fi? <Continue>
Data & Privacy <Continue>
Migration Assistant: <Not Now>
Terms and Conditions: <Agree>
  I have read and agree to ... <Agree>
Create a Computer Account
  Full name: Admin
  Account name: admin
  Password: <std_pwd>
  Hint: <none>
  <Continue>
Enable Location Services
  [ ] Enable Location Services on this Mac
  <Continue>
    Are you sure ...? <Don't Use>
Select Your Time Zone
  Berlin - Germany
  <Continue>
Analystics
  [ ] Share Mac Analytics with Apple
  [ ] Share crash and ...
  <Continue>
Screen Time
  <Set Up Later>
Siri
  [ ] Enable Ask Siri
  <Continue>
Touch ID
  <Set Up Tocuh ID Later>
    Are you sure ...? <Continue>
Choose Your Look
  Light 
  <Continue>

• Infoblox Eintrag für MAC-Adresse
• IP via DHCP beziehen

• Sharing settings:

  Apple Menu | System Preferences | Sharing
    Computer Name: qos005
    [+] Screen Sharing
        <Computer Settings>
          [+] Anyone my request permission to control screen
    [+] Remote Login
    [+] AirPlay Receiver

• Disable Firewall:

  Apple Menu | System Preferences | Security & Privacy | Firewall
    Firewall: Off

• Perform System Update
• Software Update configuration:

  Apple Menu | System Preferences | Software Update | Advanced
    [+] Check for updates
    [+] Download new updates when available
    [ ] Install macOS updates
    [+] Install app updates from the App Store
    --
    [+] Install system data files and security updates
  <OK>

Apple Menu | System Preferences | Users & Groups | Login Options | <Click the lock to make changes.>
  Network Account Server: <Join...> | <Open Directory Utility...> | <Click the lock to make changes.>
    <Edit in Menubar> | <Enable Root User> | 
      Password: <std_pwd>

  - Zertifikate herunterladen unter: https://pki.pca.dfn.de/dfn-ca-global-g2/cgi-bin/pub/pki
    - Wurzelzertifikat
    - DFN-PCA-Zertifikat
    - DFN-CA Global G2 Zertifikat
  - Finder | Downloads | <Zertifikate durch Doppelklick hinzufügen> | 
    - Keychain: System | <Add>
  - die drei Zertifikate unter Downloads können nach dem Hinzufügen gelöscht werden

su - root
scp ltspmaster.physik.privat:.ssh/authorized* ~/.ssh

• Rechner in checkmk einrichten
• login auf ltspmaster und Verteilen von Source und Konfigurationsdateien

  DistAgent <client>
  DistMasterfilesOSX <client>

  für

  • FreeFileSync eingerichtet
  • FOG-Client installiert
  • Sophos-Installationssoftware hinkopiert

su - admin
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> /Users/admin/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"

brew install coreutils

Apple Menu | System Preferences... | Security & Privacy
  <FileVault>
  <Click the lock to >
  <Turn On File Vault>
  <Create Recovery Key>

System Preferences | Users & Groups | <Click the log to make changes> | <+>
  New Account: Administrator
  Full Name: Dominik Lentrodt
  Account Name: dominik
  Password: <keepassxc_mbeh>
  Password hint: <none>

su - root
cd /Users/Sophos-Endpoint-osx/Sophos\ Installer.app/Contents/MacOS/tools
sudo ./InstallationDeployer --install

Allow Sophos "Full Disk Access"

Apple Menu | System Preferences... | Securtiy & Privacy
  <Click the lock to make changes.>
  Full Disk Access 
    <Drag Sophos Icon to application list>

Browser: https://thunderbird.net | <Free Download>
Downloads | <Open in Finder> | Thunderbird*.dmg <double click> | 
<open> Applications | Thunderbird-Icon <drag to Applications>
Thunderbird*.dmg <Move to Bin> | <close all windows>

Browser: http://www.software.physik.uni-freiburg.de/Mathematica/Mathematica_12.3.1_MAC.dmg 
Downloads | <Open in Finder> | Mathematica_12.3.1_MAC.dmg 
  Applications <click to open> | Mathematica_12.3.1_MAC <drag to Applications>
  WolframScript.pkg <double click to install>

• Mathematica Lizenz in Wolfram User Portal zugewiesen
• Mathematica auf dem MacBook für den Benutzer aktiviert

<connect external harddisk>
<rename harddisk>TM Backup
Apple | System Preferences | Time Machine | <select Backup Disk>
  <select external harddisk> 
  [+] Encrypt backup
  <Use Disk>
    Backup password: ****
    Verify password: ****
    Password hint: keepass
    <Encrypt Disk>

see: https://support.apple.com/en-us/HT201250

<apple> | <About This Mac> |

Serial Nubmer: <select and copy>
<Support> | <Check Your Coverage...>
  Enter your serial number: <paste>
  <enter code> | <Continue> 
    (+) Valid Purchase Date
    (+) Telephone Technical Support: Active
    (+) Coverd by Apple Care Protection Plan
        Coverage end date: ~ <current date> + 5 Years
    

• Inventaraufkleber anbringen
• Label drucken und anbringen
  • PC, Adapter, Externe Festplatte

• GLPI entry done
• Netzwerkadapter eintragen: MAC & IP
• Lieferschein archiviert
• Inventarnummer eingetragen
• Anlageformular / Inventrisierung archivieren
• Checkout Sheet archivieren
• Aufkleber anbringen

• Checkout Sheet fertig ausfüllen
  
  • Name und Unterschrift des Benutzers
  • Datum und Unterschrift des IT-Verantwortlichen
  • Dominik Lentrodt
  • dominik.lentrodt@physik.uni-freiburg.de
  • 5886
  • Physikalsiches Institut, AG Buchleitner
  • 2022-01-15
  • MacBook Pro M1 2020 (Z11B-0110), S/N: FVFGR1AXQ05N
  • Accessories:
    • belkin USB-C 6-in-1 Multiport Adapter
    • WD Elements 1TB external Harddisk

• Checkout Sheet unterscheiben lassen
• (noop) E-Mail Account einrichten (Mail / Thunderbird)
• (noop) Kalender einrichten (Calendar / Thunderbird)?
• Hinweis auf fehlendes FreeSync-Backup
• (noop) Passwort für Benutzer „Dominik Lentrodt“ ändern
• Pfad zu Homebrew für Benutzer ergänzt
• FindMyMac Service aktivieren wenn gewünscht
  see: https://support.apple.com/de-de/guide/findmy-mac/fmm53101237/mac