Mac setup

This page gives the steps that should be followed to setup a computer before the machine is given to the end user. Fresh computer and Sophos are the steps that are mandatory to follow, the other ones should be installed based on the needs of the user.

Fresh computer

1. Create a sysadmin account on that computer, add the username and password to the bitwarden vault under the folder "Machines sysadmin" with the item name being the serial name of the machine
2. Open settings on "General" and click on "About", change the device name to "LTM-XXXX" where XXXX is the asset number from Library
3. Open settings at "Users & Groups"
4. Toggle the "Allow network users to log in at login window" and click edit
5. On the pop-up click the plus sign (+) and add the address to the active directory (i.e. hera.arditi.pt) and change the connection ID to the device name, wait for it to connect
6. After connecting, the "ARDITI (Active Directory)" should appear on the network servers
7. Click edit on the connection, open directery utility, click the lock icon, double click on the "Active directory" and click on show options
8. Check "Create mobile account at login" and uncheck "Require confirmation before creating a mobile account", go to the "administrive" tab and check "Allow adminsitration by" and leave "Domain admins" there
9. Logout of the sysadmin account and log in to your account with your institutional credentials (the username should be your email with domain included). The login should work now
10. Check for OS updates and install them if any
11. Log out of your account

Filevault (Mandatory)

1. Go to "System Settings" -> "Privacy & security" -> FileVault
2. Click on "Turn on" and copy the given key
3. Add the key to bitwarden, it should be placed on the notes of the device in the ARDITI collection "Machine sysadmin" (e.g. For the device LTM-00245 should be added the note "Filevault key: XXXX-XXXX-XXXX-XXXX-XXXX-XXXX")
4. Click continue to turn on FileVault

Sophos (Mandatory)

1. Login into sysadmin user, the credentials are in bitwarden folder "Machines sysadmin" and the item name is the serial number of that machine which can be seen on the sticker on it
2. Go to Sophos page (https://www.sophos.com/en-us)
3. On the top right corner of the page, press "Sign in" and then "Sophos central"
4. Login into a system admin account
5. After login, on the menu select "My Products" -> "Endpoint" -> "Installers"
6. Click on "Download Complete macOS Installer" and wait for the download to finish
7. Open the downloaded folder and double click on the "Sophos Installer", press install and you should be prompted to enter the sysadmin credentials, fill those credentials, and click install
8. Run through the installation
9. Open the app "Sophos Endpoint", if it shows green and it says that the computer is protected, the installation ends here, if it shows red and with a button to "Open Endpoint Self Help", click on that button, and it should open "Endpoint Self Help"
10. On "Endpoint Self Help" click on "Prerequisites" and give all the permissions needed for sophos
11. Sophos should now show green, run a full scan

Office

1. On your preferred browser, navigate to cloud.arditi.pt
2. Login into your Nextcloud account
3. Go to files
4. Go into the "_Informatica" folder, search for the "Office" folder, and open it
5. Open the folder "MAC" and download the files "Serializar.pkg" and "Installer.pkg"
6. THIS IS VERY IMPORTANT, Run the Serializar.pkg file first and only then run the "Installer.pkg". When the "Installer.pkg" finishes office should be installed and working

Nextcloud

1. Open your preferred browser and navigate to https://nextcloud.com/
2. Hover "Download" on the top menu and press "Desktop & mobile apps"
3. Expand the spoiler "Nextcloud Files" and press "macOS 12+"
4. Run the downloaded file
5. Run through the wizard
6. After the installation is complete, open the app "Nextcloud"
7. Press "Log in" and put the address "cloud.arditi.pt"
8. Authenticate on the browser

Connecting network location

1. Right-click finder and click on "Connect to Server"
2. Write "smb://odinsvault.arditi.pt/NAME_OF_THE_SHARED_FOLDER", the NAME_OF_THE_SHARED_FOLDER can be seen in odinsvault.arditi.pt by logging in with an admin account and going to "file station", add the plus icon to add to the favorites (i.e. "@arditi.pt" even if the actual email is @mare.arditi.pt or @oom.arditi.pt)
3. Click connect and insert the credentials of the end user
4. Finder will show the network location now

Adding a printer

1. To add a printer run the following command on the terminal replacing the PRINTER_NAME with the name of the printer you want to add: lpadmin -p "ARDITI_0_OOM" -E -v "ipp://10.20.1.249/printers/ARDITI_0_OOM" -m everywhere the PRINTER_NAME can be any of the followings:

• ARDITI_02_HALLWAY_01 => This is the printer near the CNC machinery on Floor -2
• ARDITI_02_HALLWAY_02 => This is the printer near NeuroRehabLab on Floor -2
• ARDITI_02_STAFF => This is the printer inside the staff room (Room -1) on Floor -2
• ARDITI_0_OOM => This is the printer inside the OOM room (Room 4) on Floor 0
• ARDITI_DAF_REST => This is the printer inside DAF room on Floor 2

OnlyOffice

This describes how a user can set up OnlyOffice to be used in conjunction with Nextcloud, eliminating the need to install Microsoft Office.

1. Install the OnlyOffice application for your operating system from https://www.onlyoffice.com/download-desktop.aspx
2. Open the OnlyOffice application and in the "Clouds" section on the left side menu, click on the plus button "+"
3. Select "Nextcloud" and fill the "Cloud office URL" with "cloud.arditi.pt"
4. Click "Connect now" and on the page that opens, enter your Nextcloud credentials
5. Now you can either create a Word document on the cloud by clicking "+ New" and clicking "New document" or on the OnlyOffice application go to "Home" and on the top select the type of document you want to create and when you save it save it on a folder which will be synced to Nextcloud