Skip to main content
Return to campus fall 2020 and other COVID-19 updates   READ MORE »

MacOS: Offices Logon

Last updated

BETA NOTICE: This page is intended only for beta testers of a new macOS logon process for university office computers. UWEC LTS is currently testing a new login process with several individuals on campus, utilizing JAMF Connect. LTS will contact users individually once this program is ready for campus wide deployment. This new logon process is not intended for any Mac computer laboratories.

In addition to changing the logon interface for macOS users, this process with encrypt the local hard drive of the computer in order to prevent loss of information should the computer become lost or stolen. The computer is encrypted through a macOS built-in process know as FileVault. More information on FileVault can be found below.

Contents:

Installing JAMF Connect via Self Service

Please make a backup of your computer if you are concerned about any files or applications that might be lost during this process. The process does not delete or remove any data and LTS does not anticipate any issues with user information but it is always good practice to backup any critical information.

  1. When you are ready to begin, please quit any open Applications.
  2. Open the Self Service application located in the Applications folder

  3. Sign into Self Service with UWEC credentials.

  4. Search for JAMF Connect and find the item Setup JAMF Connect and Filevault Computer. To begin installation of JAMF Connect, click Install.

  5. You should be prompted to read the detailed description of what will be modified after running the policy, click Install.

  6. After starting the install, you will be prompted for your UWEC username. Please enter just your username without the @uwec.edu.
  7. You will then be prompted for your password for the UWEC account on this computer.
  8. Once all the software and settings have finished being setup, you will be prompted that the computer needs to restart.
    Note: The computer will restart automatically within 5 minutes if you do not manually restart. Please close any applications that may cause the computer to delay a restart, including Self Service.

JAMF Connect Sign In With Existing Account and First Logon

After JAMF Connect is installed through Self Service and thereafter when you log out of the computer, you will be presented with a new login screen that has been customized for UWEC. Logging on for the first time after installing JAMF Connect will require an additional password verification. Furthermore, additional time may be required to convert the existing account and setup user preferences during the first logon. It is recommended that you repeat this process for each account on the computer as soon as possible (e.g. student or WKS accounts).

  1. Logon using your UWEC credentials.
  2. You will be asked to verify your password by entering it again so that the account can be properly converted.
  3. You will be presented with several account preference choices. Please make whatever choices you wish.
  4. You can begin using your computer with the new sign on process. Your computer may prompt you that the Filevault process for encrypting data on the computer will begin. Please see the section below about Filevault for more information.

JAMF Connect Sign In With New Account

If this is the first time you are signing into your UWEC account on a computer, then you will use the Single Sign On (SSO) authentication option when signing into that computer.

  1. At the Local Login window, click Cancel.
  2. A Microsoft Sign in window will appear. Enter your full UWEC email address.
  3. The window will change to the normal UWEC web login page with Duo multifactor authentication. Enter your UWEC credentials.
    Note: DUO prompt should only show up the first time when setting up a new account.
  4. After signing in, you will be presented with several account preference choices. Please make whatever choices you wish.
  5. You can begin using your computer with the new sign on process. Your computer may prompt you that the Filevault process for encrypting data on the computer will begin. Please see the section below about Filevault for more information.

FileVault Encryption

FileVault is a service for macOS that encrypts the information on the computer hard drive and prevents unauthorized access to files. This also insures that your information is not accessed if the computer is lost or stolen. During the setup of the JAMF Connect logon process, LTS enables the computer to begin encrypting the drive on the next logon. This encryption happens in the background and will continue to encrypt information on the fly so that you do not need to manage the process.

Please note that while FileVault provides excellent protection for your data, it can complicate data recovery should you ever run into significant problems with your computer. Having a secure backup of your data is always a best practice to mitigate unforeseen problems. If you need any assistance setting up a backup process either through the macOS utility Time Machine or using cloud based services such as OneDrive, please contact the LTS Help Desk.

  1. FileVault will prompt to ask for permission to begin encrypting after the first logon. It is required that you Enable Now to encrypt right away and this process happens in the background. You will not need to enable on subsequent logon attempts.
  2. A confirmation that FileVault has started will appear. This process will continue in the background but allow you to use the computer normally by clicking OK.
    Note: You may experience a longer logon time or blank and black screen while the account is being converted and background encryption begins.

Enabling Additional Accounts for FileVault Encryption and Logon

FileVault is a service for macOS that encrypts the information on the computer hard drive and prevents unauthorized access to files. After enabling FileVault, a full restart of the computer requires an account holder with FileVault permissions to logon. For computers that are shared workstations or with multiple user accounts, each account will need to be authorized to logon using FileVault. LTS has created a convenient policy in Self Service to allow the enablement of accounts for FileVault access. However, accounts will need to be done individually and with the account holder present. Each account only needs to be enabled once.

  1. Start by having the user for an account present to provide the necessary credentials for the account.
  2. Open the Self Service application located in the Applications folder

  3. Sign into Self Service with UWEC credentials.

  4. Search for Enable Account and find the item Enable Account for FileVault, click Enable.

  5. You will be prompted for your UWEC username. Please enter just the username for the account that needs to be enabled, without the @uwec.edu.
  6. You will then be prompted for the password that corresponds to the UWEC account entered above for this computer.
  7. Once the Self Service policy finishes, the account should be enabled. You can repeat this process for each account on the computer that needs to be enabled.

JAMF Connect Verify

JAMF Connect Verify is an always-running application that keeps the account on your computer in sync for username and password with your UWEC account. The application appears in the menu bar and gives a live update on the number of days remaining before your password expires. During your account creation, you should automatically be signed into Verify. However, if you are prompted to sign in, instructions are below.

JAMF Connect Verify Features

  • Sign In: Click link to sign into your UWEC account. If already signed in, you should see your account name above and in the Sign In window.
  • Change Password: Provides a quick link to the UWEC change password website. Clicking this link will open a small window and allow you to directly change your password while in JAMF Connect Verify.
  • Kerberos Tickets: Utilized by LTS for diagnosing any issues with Verify and can be used to refresh user account details.
  • Home Directory: When connected to the UWEC VPN, selecting Home Directory will mount the current user H drive.
  • Get Software: Provides a direct link to the Self Service application for installing software on UWEC Mac computers.
  • Get Help: This will open the UWEC JAMF Connect Knowledge Base article on the UWEC website.

Sign in to JAMF Connect Verify

Signing into JAMF Connect Verify is required and the application window will remain open until you have successfully logged in.

  1. Select the JAMF Connect Verify icon in the menu and select Sign In.
  2. Enter your UWEC credentials at the sign in window.
    Note: Please enter your entire UWEC email address in the username field.

  3. The sign in window should disappear and in the menu for JAMF Verify you should see your user account and the remaining days before your current password expires.

JAMF Connect Verify: Network Password Sync Error

JAMF Connect Verify may prompt that your network password is not the same at your local account password. Verify confirms periodically that the passwords are in sync. You will need to enter the current local computer password and your current UWEC password in order for Verify to continue syncing your accounts. If you don't have this information, please contact the LTS Help Desk for further assistance.

  1. When prompted, enter your current Local Password.
  2. Verify will then change the Local Password to match your current UWEC password.

Frequently Asked Questions

What if I don't have a local account and I'm off campus, how do I connect to my local Wi-Fi to use the Cloud/Single Sign On option?
A network connection (wired or wireless) is required for the best experience, particular if signing in with the Cloud/Single Sign On option. JAMF Connect has a Network Connection link that will allow you to choose an available Wi-Fi signal and enter any required credentials to join.

Was this article helpful? Yes No

View / Print PDF