Below this line is where the public-facing content begins

Apple device management (for macOS and iPadOS) is done using the central EPM tool Jamf.

Supported Operating Systems

EPM and Apple only support the latest 3 operating systems.

Currently supported operating systems:

• macOS 12 Monterey

• macOS 13 Ventura

• macOS 14 Sonoma

Compatibility with Endpoint Management

UT Self Service and Support Hub

(what it is, what it looks like, where to find it, and specific features you want to call out. E.g. Computer Information policy, you can run that and include the output in your support request)

UT Self Service is installed on all managed computers. UT Self Service is a curated app catalog that allows employees to install third party apps (i.e., Google Chrome, Mozilla Firefox, Slack, Zoom, Box Drive, etc.) and come with managed updated applied, to make sure the apps stay up-to-date and the computer remains under security patching compliance. There are also support utilities within UT Self Service that can be run to get an overview of the computer’s information, find your VPN IP address, view app install history, get basic network diagnostics, etc.. Finally, UT Self Service also has bookmarks to commonly accessed University sites, including Central ITS Service Status, the wiki, the help desk support site, UT Mainframe, Stache, Remote Support portal, etc..

UT Self Service can be found in the Applications folder at /Applications/UT Self Service.app

UT Self Service can also be directly accessed from the ‘CNS IT Support Hub’ or ‘Jamf Connect’ menu bar icon drop down menus.

CNS IT Support Hub is an app that can be found on the right side of the menu bar under the Status menu. The icon is the UT Tower.

The CNS Support Hub provides quick access to basic computer information such as; computer name, Computer model, serial number, current version of macOS installed, last reboot date, and storage used. It also has links to submit a help desk ticket with CNS IT, open the Service Now website, open the UT Self Service app, and launch Cisco Secure Client to connect to the UT VPN.

The CNS IT Support Hub will display a notification badge on the icon if there are any software updates available for the computer, if the computer has not restarted in over 14 days, or if the computer’s storage capacity reaches 90% used.

Logging in with your EID

You can login to your computer using your EID and EID password. This creates a standard user profile (an account without admin permissions).

If you are logging in to the computer for the first time, or have signed out of the computer and are logging in, you will be prompted with a Microsoft Single Sign On page where you will sign in using the email address in the format of ‘YOUR_EID@eid.utexas.edu’. You must have an internet connection at this point for this to successfully load and sign in.

If your account has already been created and you signed out, and are using the ‘utexas’ Wi-Fi, this sign-in page will not load, as internet access is not accessible via ‘utexas’ Wi-Fi when signed out. Instead, at the bottom of the screen you will select “Local Login” and sign in with your EID as the username and your EID password for the password.

If your account has already been created and you restart the computer, you will be prompted with a login page for FileVault where you will just sign in using your EID and EID password.

If you change your EID password from the computer, the FileVault password will be updated with the new password allowing continued log in after restart using the new password. If the EID password is changed from a different device while the computer is turned off, you will need to contact CNS IT to assist with updating the FileVault password to match your new password.

Administrative Access

If you need to install software or make changes to your computer’s settings that require an admin username and password, administrative access can be used.

If you were given an administrator account during deployment of the computer, when prompted for administrator credentials for authorization you will use your administrator credentials; username of ‘admin-YOUR_EID’ and the password you set for the account.
NOTE: you will not log in to the administrator account on the computer, this system is designed to break when this is done. These credentials are only used for authorization when needed.

If you do not have an administrator account, you can open UT Self Service and run the policy titled ‘Make Me an Admin’. This will elevate your user account to an administrator for 15 minutes to allow authorization.

• All actions performed during this 15 minutes are logged for IT reference.

• Restarting or shutting down the computer will not circumvent the 15 minute time limit.

• If you need to use the account after elevation for sudo privileges in the command line and you have a terminal window open before running the ‘Make Me an Admin’ policy, you will need to reload your terminal profile or restart the terminal for the elevated privileges to take effect.

Installing and Updating Applications

By default, CNS IT will have installed:

• Rosetta 2

• Cisco AnyConnect/Secure Client

• Code42 CrashPlan

• Microsoft Defender

• Microsoft Office

• Tenable Nessus

Third party applications available from UT Self Service (whether installed from Self Service or independently) will be inherited by management and have updates installed automatically. Some updates will be installed silently in the background with no user interaction, while others may display a notification that the app needs to be quit for the update to be installed. If the user receives notification, they will have 4 days to defer before the app is forcibly quit an updated.

• Jamf Application Patching End User Experiences

Operating System and Application Security Updates

Using EPM, CNS OIT manages the installation of security updates for your computer’s operating system and certain applications.

Users will receive a notification when new updates are available for macOS. You will have 6 days to install the updates before the notification becomes persistent and you are forced to update without any further options for deferral.

• Jamf OS Patching: UT Macintosh Security Updates and Reboot Policy

• Jamf Application Patching End User Experiences

• macOS Updates and Upgrades

• Restart and Update Your Computer: FAQs