Before installing your JSS, be sure to complete JumpStart Pre-work items 1-7:
- If you haven’t already, visit https://my.jamfsoftware.com/products.html and create yourself an account. Be sure your company email address matches what JAMF has on file. Your account should already have the ability to access the product download and your activation code.
- Download the Mac software. You’ll need this to actually run the Casper applications for taking inventory, running remote commands, etc. This download includes the Mac JSS server installer as well, if you’re planning to run your server from a Mac. Otherwise…
- Download the JSS Installer for Windows. Under the Casper Suite section, click the Show Alternative Downloads link to display the Windows Download button.
- Download MySQL 5.5 or 5.6 Enterprise or Community edition.
- Download the Open Java Development Kit (OpenJDK). I recommend using the latest version 7 or latest version JAMF recommends in its setup guide.
- Download the Java cryptography extensions.
- Create a fully qualified DNS entry for your server (e.g. https://macmanagement.mycompany.com)—preferably not a .local domain but we can use this if necessary. If you plan to manage your devices internally on your network as well as externally (home or via the Internet) then this one DNS entry must be accessible both internally and externally. Keep in mind your end users may see this URL. Name it something meaningful to them as well as you.
System requirements may change as Casper matures. Locate current system requirements in the “JSS Installation and Configuration Guide for Windows” located in the JSS Installation folder found in the JSSInstallerWindows download. JAMF typically supports the current Windows operating system and at least one earlier operating system version.
Note: Windows Server is not required although the documentation specifies either Windows Server 2008r2 or Windows Server 2012. The software will run on desktop versions such as Windows 8.1 (not recommended for production use).
Install the downloaded MySQL software.
- Open the MySQL disk image file and locate the mysql-installer-community-18.104.22.168 Windows Installer Package. Double-click the file to run the installer. Click the Install MySQL Products link.
- Accept the license agreement and click the Next button.
- Click the Execute button if prompted to Find Latest Products and then click the Next button to proceed.
- When prompted for Choosing a Setup Type, choose Server Only. Make note of:
C:\ProgramData\MySQL\MySQL Server 5.6\
Click the Next button.
- Click the default buttons in the remaining windows and proceed with the installation.
- After Installation, click the Next button to continue with the Initial Configuration.
- In the MySQL Server Configuration window, set the Config Type to Dedicated Machine. Leave the remaining options at their defaults. Click the Next button to continue.
- Enter a root password for your MySQL server and document this password in case you need it in the future. Do not add a user at this time. Click the Next button.
- Set the Windows Service Name to “JSSMySQL56” (no spaces or special characters) to make this service easier to identify when needing to restart the service. Leave the default options to Start the MySQL Server at System Startup as well as to Run the Windows Service as a Standard System Account. Click the Next button.
To make the mysql binary file a littler easier to access, let’s set a Windows system environment variable.
- Right-click the Computer icon in the Start Menu or on the Desktop and choose Properties > Advanced > Environment Variables. Optionally, search for Environment Variables and choose Edit The System Environment Variables. Choose Path under System Variables and click the Edit button.
- At the end of the Variable Value field, insert a semi-colon ( ; ) followed by the Installation Path you noted earlier plus the path to mysql.exe file inside the bin directory:
C:\Program Files\MySQL\MySQL Server 5.6\bin. Click the OK button when done and close all other windows.
With the mysql environment variable set, we’ll be able to simply type “mysql” in the next steps rather than the full path
C:\Program Files\MySQL\MySQL Server 5.6\bin\mysql.exe.
Create the MySQL Database
We have a fresh instance of MySQL installed. Now, we need to create the database. JAMF does not support MySQL database management beyond creating a database, connecting the JSS and configuring a simple backup routine. You’re responsible for setting a password for the root user in MySQL and for moving the MySQL backup files into your backup system.
We’ll use the Command Prompt.
- Right-click the Command Prompt application and choose Run As Administrator to avoid any issues with running the following commands.
- Log in using the default user account “root”.
mysql -u root -p
When prompted for the password enter the root password you created during installation.
- Now, create a database named “jamfsoftware”. I suggest keeping this name in case you need support from JAMF later. There’s really no need to change this name:
CREATE DATABASE jamfsoftware;
- Finally, create a MySQL user account named “jamfsoftware” with a password of “jamfsw03” and give this account access to the newly created “jamfsoftware” database. If you decide to change the username or password, make note of it for later. We’ll use this account information during the first run of the JSS.
GRANT ALL ON jamfsoftware.* TO 'jamfsoftware'@localhost IDENTIFIED BY 'jamfsw03';
- When done, exit MySQL and close the Command Prompt:
Install the downloaded Java SE Development Kit (JDK) and Java Cryptography Extensions (JCE).
- Double-click the JDK 7 Installer package and install the software.
- Extract the Cryptography Extensions file and open the UnlimitedJCEPolicy folder.
- Copy the local_policy.jar and US_export_policy.jar files to
C:\Program Files\Java\jre7\lib\securityfolder. Replace any existing files.
Install the JSS
Install the downloaded JSS software.
- Extract the JSSInstallerWindows9.x file and open the JSSInstallerWindows folder.
- Run JSSInstallation > JSS Installer Windows Installer package and follow the prompts.
- When installation is complete, verify your JSS is working by opening a web browser and visiting https://127.0.0.1:8443/ on your server. You should receive an alert about the server’s security certificate. This is normal. Click the Continue button.
- If you see the License Agreement page then you’ve successfully installed your JSS and you’re ready to proceed through the JSS Setup Assistant.
Configure MySQL Backups
JAMF includes a database utility to help you configure daily backups of your “jamfsoftware” MySQL database. These backups are stored locally on the JSS server. After you configure your daily backups, you’re responsible for putting the backups into your organization’s backup system.
WARNING: Your backup system should store these database backups in another location other than the local server. If you lose your JSS to hardware malfunction, corruption, malevolence or other catastrophic event then these backups are your only source of recovery.
- This utility must run with elevated privileges. Right-click the Command Prompt application and choose Run As Administrator.
- Enter the path to the JSSDatabaseUtil.jar file in the Command Prompt:
"C:\Program Files\JSS\bin\JSSDatabaseUtil.jar"and press the return key.
- When prompted, click the Continue button to point the JSS Utility to the MySQL binaries located in
C:\Program Files\MySQL\MySQL Server 5.6\bin. Click the Choose button.
- In the JSS Database Utility window, click the Save Backup Now button to create your first backup. You can name the file something like “First Backup” and save to the default location. This should complete in less than a minute.
- Enable Schedule Automatic Backups For and choose a time from the drop down menu. Save the backups to the default location unless you prefer to save somewhere else. Note this location for your external backup solution.
- Enable Delete Backups Older Than and choose the number of backups you want to keep (one for each day).
- Simply close the JSS Database Utility window to save your settings.