Before installing your JSS, be sure to complete JumpStart Pre-work items 1-7:
- If you haven’t already, visit https://my.jamfsoftware.com/products.html and create yourself an account. Be sure your company email address matches what JAMF has on file. Your account should already have the ability to access the product download and your activation code.
- Download the Mac software. You’ll need this to actually run the Casper applications for taking inventory, running remote commands, etc. This download includes the Mac JSS server installer as well, if you’re planning to run your server from a Mac. Otherwise…
- This item does not apply to Macs.
- Download MySQL 5.5 or 5.6 Enterprise or Community edition.
- Download the Open Java Development Kit (OpenJDK). I recommend using the latest version 7 or latest version JAMF recommends in its setup guide.
- Download the Java cryptography extensions.
- Create a fully qualified DNS entry for your server (e.g. https://macmanagement.mycompany.com)—preferably not a .local domain but we can use this if necessary. If you plan to manage your devices internally on your network as well as externally (home or via the Internet) then this one DNS entry must be accessible both internally and externally. Keep in mind your end users may see this URL. Name it something meaningful to them as well as you.
System requirements may change as Casper matures. Locate current system requirements in the “JSS Installation and Configuration Guide for OS X” located in the Resources folder found in the Mac software download. JAMF typically supports the current OS X operating system and at least two earlier operating system versions.
Note: OS X Server is not required.
Install the downloaded MySQL software.
- Open the MySQL disk image file and locate the mysql-5.6.x-osx10.7-x86_64.pkg Installer package. This is generally an unsigned package and Gatekeeper will not allow you to simply double-click to install it. Right-click the Installer package and choose Open. Install the software.
- Locate the MySQL.prefPane file. Right-click the file and choose Open. Choose the option Install For All Users Of This Computer.
- After the prefPane is installed, choose Automatically Start MySQL Server On Startup and click the Start MySQL Server button. Verify the MySQL Server Instance is running. Close the MySQL pane.
- Locate the MySQLStartupItem.pkg Installer package. Right-click the Installer package and choose Open. Install the software.
To make the mysql binary file a littler easier to access, let’s alias it and store that in our user profile.
- Open the Terminal application found in Applications > Utilities.
- If the current user’s profile doesn’t exist, we’ll create it. Otherwise, this command will only update the modified timestamp of the file.
- Now, we’ll add a single line that aliases “mysql” to the full path to the MySQL binary.
echo 'alias mysql="/usr/local/mysql/bin/mysql"' >> ~/.profile
- Finally, we need to make a quick reference to the profile to update our shell.
With the mysql binary aliased and stored in our user profile, we’ll be able to simply type “mysql” in the next steps rather than the full path “/usr/local/mysql/bin/mysql”.
Create the MySQL Database
We have a fresh instance of MySQL installed. Now, we need to create the database. JAMF does not support MySQL database management beyond creating a database, connecting the JSS and configuring a simple backup routine. You’ll be responsible for setting a password for the root user in MySQL (if you want to create one) and for moving the MySQL backup files into your backup system.
We’ll use the Terminal application again.
- Log in using the default user account “root”. This account has no password.
mysql -u root -p
When prompted for the password just press the return key.
- Optionally, set a password for the root accounts in your database.
UPDATE mysql.user SET Password = PASSWORD('newpassword')
WHERE User = 'root';
- Now, create a database named “jamfsoftware”. I suggest keeping this name in case you need support from JAMF later. There’s really no need to change this name:
CREATE DATABASE jamfsoftware;
- Finally, create a MySQL user account named “jamfsoftware” with a password of “jamfsw03” and give this account access to the newly created “jamfsoftware” database. If you decide to change the username or password, make note of it for later. We’ll use this account information during the first run of the JSS.
GRANT ALL ON jamfsoftware.* TO 'jamfsoftware'@localhost IDENTIFIED BY 'jamfsw03';
- When done, exit MySQL and close the Terminal application:
Install the downloaded Java SE Development Kit (JDK) and Java Cryptography Extensions (JCE).
- Open the JDK disk image and locate the JDK 7 Update xx.pkg Installer package. Double-click the Installer package and install the software.
- Unzip the Cryptography Extensions file and open the UnlimitedJCEPolicy folder.
- Copy the local_policy.jar and US_export_policy.jar files to /Library/Java/JavaVirtualMachines/jdk1.7.0_xx.jdk/Contents/Home/jre/lib/security folder. Replace any existing files.
Install the JSS
Install the downloaded JSS software. During the installation, you may receive a prompt that Server.app 1.4.3 or later is required to install a JDS instance on the server. This is not necessary if you’re not planning to install a JDS server here. I don’t recommend installing distribution points on the same machine as the JSS except for very small environments. Just ignore this warning for now.
- Open the CasperSuite9.xx.dmg disk image file and locate the JSS Installer.pkg Installer package. Double-click the Installer package to begin installing the software.
- Ignore any alerts about JDS requiring Server.app.
- During the installation, the Installer will prompt you for your MySQL database connection information. If you are running your MySQL database on the same server as your JSS then leave the Server Name as “localhost”. Otherwise, enter the DNS name or IP address of another server where you’ve installed your MySQL software and configured your “jamfsoftware” database. If you’ve chosen to change the “jamfsoftware” database user information in step #4 while installing MySQL then enter the new information now. Otherwise, if you’ve used all the default settings just click the Continue button.
- When installation is complete, verify your JSS is working by opening a web browser and visiting https://127.0.0.1:8443/ on your server. You should receive an alert about the server’s security certificate. This is normal. Click the Continue button.
- If you see the License Agreement page then you’ve successfully installed your JSS and you’re ready to proceed through the JSS Setup Assistant.
Configure MySQL Backups
JAMF includes a database utility to help you configure daily backups of your “jamfsoftware” MySQL database. These backups are stored locally on the JSS server. After you configure your daily backups, you’re responsible for putting the backups into your organization’s backup system.
WARNING: Your backup system should store these database backups in another location other than the local server. If you lose your JSS to hardware malfunction, corruption, malevolence or other catastrophic event then these backups are your only source of recovery.
- Locate the JSSDatabaseUtil.jar file in /Library/JSS/bin and double-click run it.
- If the utility warns you it cannot connect to the database, just click the OK button to proceed.
- The utility will display the Database Connection Setup window. Enter the default password “jamfsw03” or enter the credentials of the user you configured in step 4 above when creating the MySQL database. Click the Apply Settings button.
- In the JSS Database Utility window, click the Save Backup Now button to create your first backup. You can name the file something like “First Backup” and save to the default location. This should complete in less than a minute.
- Enable Schedule Automatic Backups For and choose a time from the drop down menu. Save the backups to the default location unless you prefer to save somewhere else. Note this location for your external backup solution.
- Enable Delete Backups Older Than and choose the number of backups you want to keep (one for each day).
- Simply close the JSS Database Utility window to save your settings.