This article is designed to give a step-by-step overview of the First Time Setup process on a Mac using Jamf Connect for Mission Support Technicians.
These screenshots were taken on a Macbook running Sonoma 14.7.4. They may vary slightly in look and content depending on which version you are using.
1. You may need to activate the Mac depending on if it’s been setup before
2. Select your preferred Language and then click the Arrow
3. Select your Country or Region and then click Continue
4. Learn about the Accessibility options, or click Not Now
5. Enroll in Jamf by clicking on the Enroll button. If you do not get this screen, then the Mac is not a part of the pre-stage in Jamf. Please contact the EMP team with the SN and we can assist.
6. Select your Time Zone and click Continue
7. Welcome to Jamf Connect! Have the user sign into the Mac using their University SSO. If needed, you can also sign in using your SSO to pre-install software or adjust settings before giving the Mac to the end user. (More info on this below)
8. Have the user enable FileVault by clicking on Enable Now. If you are setting this up for an End User, you can defer the FileVault up to 3 times by clicking Don’t Enable. It is recommended to defer and let the user enable it if you are setting this up for someone else
9. Learn about the Accessibility options again, or click on Not Now
10. Have the user enable Touch ID by clicking Continue (or skip it by clicking Set Up Touch ID Later)
11. Have the user select their preferred look, and then click Continue
12. The Mac will load to the Desktop shortly and will continue to download policy from Jamf including the required software. You can use the Self-Service app to install commonly used applications.
13. If the user needs Admin privileges for any reason, they can temporarily elevate their account to Admin using Jamf Connect. Instructions located here.
Additional information about FileVault:
When FileVault is enabled, on startup the Mac will first load to the FileVault unlock screen and show the user that first enabled FileVault. When the user types in their FileVault password (the same as their SSO password) Jamf will pass this password along to Jamf Connect so the user won’t need to type in their password twice to login.
If you logged into the Mac first to assist setting it up and you enabled FileVault, it is recommended that you remove your user when you are done (using the End User’s account while temporarily elevated). This will prevent your user from showing up first on the FileVault lock screen and will give the End User a better experience.