Deploying an OS X Upgrade

Deploying OS X v10.7 or later as an upgrade involves the following steps:

  1. Add the .app file for OS X to Casper Admin.

  2. Cache the InstallESD.dmg file using a policy.

  3. Create a smart computer group.

  4. Create a Self Service policy for upgrading OS X.

Note: The name of the InstallESD.dmg file in Casper Admin will vary depending on the version of OS X that you plan to deploy. For example, the name of the InstallESD.dmg file for OS X v10.10 would be Install OS X Yosemite.InstallESD.dmg.

Requirements

  • The JAMF Software Server (JSS) v9.21 or later
    Note: If you are using the JSS v8.3-9.1, see the following Knowledge Base article for instructions on deploying an OS X upgrade:
    Deploying OS X v10.7 or Later

  • Casper Admin

  • The .app file for the version of OS X that you plan to deploy (For example, Install OS X Mountain Lion.app.)
    You can obtain the latest .app file for OS X from the Mac App Store.

  • Managed computers with:

Step 1: Add the .app File for OS X to Casper Admin

Add the .app file for OS X to Casper Admin. Casper Admin extracts the InstallESD.dmg file from the .app file so you can cache and install it using policies.

  1. Open Casper Admin and authenticate to the JSS.

  2. Drag the .app file to the main repository in Casper Admin.
    Casper Admin extracts the InstallESD.dmg file, analyzes its contents, and adds it to the master distribution point and the JSS.
    The InstallESD.dmg file is displayed in blue text until you add it to a category.

    images/download/attachments/12322676/Casper_Admin_Main_Repository.png

  3. Double-click the package in the main repository.

  4. Click the General tab and choose a category for the package.

    images/download/attachments/12322676/Casper_Admin_InstallESD_General.png
  5. Click OK.

Step 2: Cache the InstallESD.dmg File

After adding the .app file to Casper Admin, you can cache the InstallESD.dmg file using a policy. Caching the file ahead of time speeds up the upgrade process.

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Click Policies.
    On a smartphone, this option is in the pop-up menu.

  4. Click New images/download/thumbnails/5832871/New_icon.png .

  5. In the General payload, enter a display name for the policy. For example, “Cache InstallESD.dmg”.

    images/download/attachments/12322676/Policy_General_payload.png
  6. Select Recurring Check-in as the trigger.

  7. Choose “Once per Computer” from the Execution Frequency pop-up menu.

  8. Select the Packages payload and click Configure.

  9. Click Add for the InstallESD.dmg file.

  10. Choose “Cache” from the Action pop-up menu.

    images/download/attachments/12322676/Cache-InstallESD.dmg-Policy_Packages-Payload.png
  11. Specify a distribution point for computers to download the package from.

  12. Select the Maintenance payload and click Configure.

  13. Ensure that the Update Inventory checkbox is selected.

  14. Click the Scope tab and configure the scope of the policy.

    images/download/attachments/12322676/Policy_Scope.png
  15. Click Save.

The InstallESD.dmg file is cached on computers in the scope the next time they check in with the JSS and meet the criteria in the General payload.

Step 3: Create a Smart Computer Group

Create a smart group of computers with the InstallESD.dmg file cached. The smart group will be used as the scope of the Self Service policy for upgrading OS X.

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Click Smart Computer Groups.
    On a smartphone, this option is in the pop-up menu.

  4. Click New images/download/thumbnails/5832871/New_icon.png .

  5. On the Computer Group pane, enter a display name for the smart computer group. For example, “InstallESD.dmg Cached”.

    images/download/attachments/12322676/Smart-Computer-Group_Computer-Group-Pane.png
  6. Click the Criteria tab.

  7. Click Add images/download/thumbnails/5832871/New_icon.png .

  8. Click Choose for “All Criteria”.

  9. Click Choose for “Cached Packages”.

  10. Choose “has” from the Operator pop-up menu.

    images/download/attachments/12322676/Smart-Computer-Group_Criteria-Pane.png
  11. Click Browse images/download/thumbnails/5832843/Browse_icon.png .

  12. Click Choose for the InstallESD.dmg file.
    Note: The InstallESD.dmg file is not available as a value until it has been cached on at least one computer.

  13. Click Save.

Step 4: Create a Self Service Policy for Upgrading OS X

After caching the InstallESD.dmg file, you can create a Self Service policy that allows users to upgrade OS X.

  1. Log in to the JSS with a web browser.

  2. Click Computers at the top of the page.

  3. Click Policies.
    On a smartphone, this option is in the pop-up menu.

  4. Click New images/download/thumbnails/5832871/New_icon.png .

  5. In the General payload, enter a display name for the policy. For example, “Upgrade OS X”.

    images/download/attachments/12322676/Policy_General_payload.png
  6. Choose “Once per Computer” from the Execution Frequency pop-up menu.

  7. Select the Packages payload and click Configure.

  8. Click Add for the InstallESD.dmg file.

  9. Choose “Install Cached” from the Action pop-up menu.

    images/download/attachments/12322676/Upgrade-OS-X-Policy_Packages-Payload.png
  10. Click the Scope tab.

  11. Click Add images/download/thumbnails/5832871/New_icon.png .

  12. Click the Computer Groups tab.

  13. Click Add for the smart computer group you just created.

    images/download/attachments/12322676/Policy_Scope2.png
  14. Click the Self Service tab.

  15. Select Make the policy available in Self Service.

  16. Configure how the policy is displayed in Self Service using the settings on the pane.

    images/download/attachments/12322676/Upgrade-OS-X-Policy_Self-Service-Pane.png
  17. Click Save.

The policy is made available in Self Service on computers in the scope the next time they check in with the JSS and meet the criteria in the General payload. OS X is upgraded when users run the policy from Self Service.

Upgrading FileVault 2-enabled drives from OS X v10.7 or v10.8 prompts users to enter their password after reboot. Upgrading FileVault 2-enabled drives from OS X v10.9 or later automatically bypasses authentication after reboot.

Note: The jamf binary automatically enables Core Storage on the target computer before installing an OS X v10.11 upgrade using a policy. This only occurs for OS X v10.11 upgrades that are installed using a policy.

Copyright | Privacy | Terms of Use | Security
Copyright JAMF Software, LLC 2016