Apple

Exactly right Paul. Thanks.

---------------------------------------------------

E. Sheldon Williams (Contractor)

EUT, OIT

URS Federal Services

Systems Engineering & Information Solutions Group

U.S. Securities and Exchange Commission

100 F Street, NE; Room L610

Washington, DC 20549-5628

Office of Information Technology

Direct: 202.551.5233

Office Email: email@hidden

This e-mail and any attachments may be confidential or legally privileged. If you received this message in error or are not the intended recipient, you should destroy the e-mail message and any attachments or copies, and you are prohibited from retaining, distributing disclosing or using any information contained herein. Please inform us of the erroneous delivery by return e-mail. Thank you for your cooperation.

From: "Dickson, Paul K. (CTR)" <email@hidden>
Date: Tuesday, September 27, 2016 at 11:23 AM
To: Carib Mendez <email@hidden>, "Williams, E. Sheldon (Contractor)" <email@hidden>
Cc: Fed Talk <email@hidden>
Subject: RE: [Fed-Talk] Centrify, Casper and AD certificate

With an installer I assume you mean certificate authority certs. I believe he is trying to get individual machine certs down to the devices.

Paul K. Dickson

Systems Engineer

National Biodefense Analysis and Countermeasures Center

301-619-5974

email@hidden

From: fed-talk-bounces+paul.dickson=email@hidden [mailto:fed-talk-bounces+paul.dickson=nbacc.dhs.gov@lists.apple.com] On Behalf Of Carib Mendez
Sent: Tuesday, September 27, 2016 11:21 AM
To: Williams, E. Sheldon (Contractor) <email@hidden>
Cc: Fed Talk <email@hidden>
Subject: Re: [Fed-Talk] Centrify, Casper and AD certificate

Sheldon,

From my experience when bound with Centrify JAMF has never reported it back correctly as bound. For AD certificates, I've instead created a separate installer that runs along side the certify installer to manually add any certificates to the system.keychain, via the security command via the CLI.

On Sep 27, 2016, at 11:06 AM, "Williams, E. Sheldon (Contractor)" <email@hidden> wrote:

Good Morning All,

                We are running into an issue where once we bind our Macs using Centrify, either thru the Centrify GUI or via terminal, the mac even though bound reports back to the JSS as not bound. This, in turn, stops a configuration profile with an AD certificate payload from being installed because “the machine is not bound to AD”

                Is anyone else seeing this with Centrify 5.3.1? We have a call into JAMF and they say it’s a known issue and that they are trying to come up with a workaround, but I was wondering if anyone else has see this and has overcome this obstacle?

Thanks,

Sheldon

---------------------------------------------------

E. Sheldon Williams (Contractor)

EUT, OIT

URS Federal Services

Systems Engineering & Information Solutions Group

U.S. Securities and Exchange Commission

100 F Street, NE; Room L610

Washington, DC 20549-5628

Office of Information Technology

Direct: 202.551.5233

Office Email: email@hidden

This e-mail and any attachments may be confidential or legally privileged. If you received this message in error or are not the intended recipient, you should destroy the e-mail message and any attachments or copies, and you are prohibited from retaining, distributing disclosing or using any information contained herein. Please inform us of the erroneous delivery by return e-mail. Thank you for your cooperation.

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden