Skip to content

Commit b9a5dca

Browse files
SenthilKumarSivakamiSenthilKumarSivakami
committed
cleaned up the onboarding using show hide
1 parent b377084 commit b9a5dca

File tree

3 files changed

+141
-84
lines changed

3 files changed

+141
-84
lines changed

‎.nojekyll

Whitespace-only changes.

‎index.html

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
<!DOCTYPE html>
2+
<html lang="en">
3+
<head>
4+
<meta charset="UTF-8">
5+
<title>Document</title>
6+
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
7+
<meta name="description" content="Description">
8+
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0">
9+
<link rel="stylesheet" href="//cdn.jsdelivr.net/npm/docsify@4/lib/themes/vue.css">
10+
</head>
11+
<body>
12+
<div id="app"></div>
13+
<script>
14+
window.$docsify = {
15+
name: '',
16+
repo: ''
17+
}
18+
</script>
19+
<!-- Docsify v4 -->
20+
<script src="//cdn.jsdelivr.net/npm/docsify@4"></script>
21+
</body>
22+
</html>

‎seed-onboarding-instructions-for-macos.md

Lines changed: 119 additions & 84 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,8 @@ This sections explains public officers and vendors the prerequisites for onboard
55
**Prerequisites** : [Remove existing softwares](#seed-pre-onboarding-clean-up-instructions-for-macos).
66

77
During this onboarding journey you will do the following:
8-
1. [Set up Intune](#get-your-macos-device-managed-by-intune-company-portal-app).
98

10-
<hr />
9+
1110
<details>
1211
<summary>1. Set up Intune</summary>
1312

@@ -68,132 +67,161 @@ During this onboarding journey you will do the following:
6867

6968

7069
</details>
71-
<hr />
7270

71+
<details>
72+
<summary>2. Enable System Integrity Protection(SIP)</summary>
7373

74-
2. [Ensure SIP is enabled on your device](#ensure-sip-is-enabled-on-your-device).
75-
3. [Ensure your device hard disk is encrypted](#ensure-your-device-hard-disk-is-encrypted).
76-
4. [Enable Full Disk Access(FDA)](#enable-full-disk-access).
77-
5. [Enrol your macOS on Cloudflare using WARP client](#enrol-your-macos-on-cloudflare-using-warp-client)
74+
To verify if SIP is enabled, open **Terminal** and run the following command:
7875

76+
```
77+
csrutil status
78+
```
7979

80-
<!--?> If you encounter any issues while onboarding, refer to [Common issues and resolution](#common-issues-and-resolution) section in the appendix before reaching out to the SEED team for support.-->
80+
If the response on your **Terminal** is ``System Integrity Protection status: enabled``, it indicates that SIP is already enabled on your device.
8181

82+
?> If it is currently disabled, run the command ``csrutil enable`` on the **Terminal** and restart your device before proceeding with the following steps.
8283

83-
## Get your macOS device managed by Intune Company Portal app
84-
Enrol your macOS device with the Intune Company Portal app to get a secured access to your email, files, and applications.
84+
</details>
85+
<details>
86+
<summary>3. Encrypt your hard disk</summary>
8587

86-
*To manage your device by Intune Company Portal app* :
88+
1. Go to the **Apple** menu > **System Preferences** > **Security & Privacy**.
89+
2. Click the **FileVault** tab.
90+
3. If you see **Turn on FileVault**, go to step 4 or proceed to [Enable Full Disk Access(FDA)](#enable-full-disk-access).
91+
4. Click the lock icon and use your Touch ID or enter your password to unlock.
92+
5. Click **Turn on FileVault**.
93+
6. You will be prompted to specify how you would like to unlock your device if you forget your device password. Select **Create a recovery key and do not use my iCloud account**.
8794

95+
<kbd>![create-recovery-key](images/onboarding-for-macos/create-recovery-key-1.png)</kbd>
8896

89-
## Ensure SIP is enabled on your device
90-
Make sure SIP is enabled to prevent executions of unauthorised codes.
97+
?> Save this key on a different device.
98+
99+
</details>
100+
<details>
101+
<summary>4. Enable Full Disk Access(FDA)</summary>
91102

92-
To verify if SIP is enabled, open **Terminal** and run the following command:
103+
1. Go to the **Apple** menu > **System Preferences** > **Security & Privacy**.
104+
2. Click the **Privacy** tab.
105+
3. From the side menu, choose **Full Disk Access**.
106+
4. Click the lock icon at the bottom and use your Touch ID or enter your password to unlock.
107+
5. Ensure the following applications are listed:
108+
- Tanium Client
109+
- Microsoft Intune Agent
110+
- Microsoft Defender ATP
111+
- Microsoft Defender ATP Security Extension
93112

94-
```
95-
csrutil status
96-
```
113+
?> If **TaniumClient** is missing, refer to [Common issues and resolution](#common-issues-and-resolution) before proceeding further.
97114

98-
If the response on your **Terminal** is ``System Integrity Protection status: enabled``, it indicates that SIP is already enabled on your device.
115+
6. Select the checkboxes beside these applications.
99116

100-
?> If it is currently disabled, run the command ``csrutil enable`` on the **Terminal** and restart your device before proceeding with the following steps.
117+
<kbd>![fda-enabled](images/onboarding-for-macos/all-apps-fda-enabled.png)</kbd>
101118

102-
## Ensure your device hard disk is encrypted
103-
To protect the privacy of your files and user data secured, ensure your device hard disk is encrypted.
104119

105-
*To ensure your device hard disk is encrypted* :
120+
</details>
121+
<details>
122+
<summary>5. Enrol on Cloudflare using WARP client</summary>
123+
124+
**Prerequisites:**
125+
1. Ensure that you have Cloudflare WARP client installed in your device. If not install it from [Clouhttps://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release](Clouhttps://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release)
106126

107-
1. Go to the **Apple** menu > **System Preferences** > **Security & Privacy**.
108-
2. Click the **FileVault** tab.
109-
3. If you see **Turn on FileVault**, go to step 4 or proceed to [Enable Full Disk Access(FDA)](#enable-full-disk-access).
110-
4. Click the lock icon and use your Touch ID or enter your password to unlock.
111-
5. Click **Turn on FileVault**.
112-
6. You will be prompted to specify how you would like to unlock your device if you forget your device password. Select **Create a recovery key and do not use my iCloud account**.
127+
2. Disconnect from any other VPN that might be running as that could clash with Cloudflare.
113128

114-
<kbd>![create-recovery-key](images/onboarding-for-macos/create-recovery-key-1.png)</kbd>
129+
*To enrol macOS on Cloudflare using WARP client* :
115130

116-
?> Save this key on a different device.
131+
1. Open the Cloudflare WARP client from the menu bar on the top right corner of your Mac device.
117132

118-
<!--Note:
133+
![cloudflare-warp-icon](images/onboarding-for-macos/cloudflare-icon.png)
134+
135+
?> You can also press ``Command+Spacebar`` and search for **Cloudflare WARP** application to open it.
136+
137+
138+
You will see the information page, followed by your privacy policy.
139+
140+
2. Click **Next** and then **Accept**.
141+
142+
![accept-privacy-policy](images/cloudflare-warp-macos/accept-privacy-policy.png)
143+
144+
3. When prompted to sign in, select **Azure AD – TechPass Prod**.
145+
146+
![gcc-cloudflare-access-signin](images/cloudflare-warp-macos/gcc-cloudflare-access-signin.png)
147+
148+
?> If you encounter an error stating that user account does not exist in the respective tenant, open a new tab and go to [https://myaccount.microsoft.com](https://myaccount.microsoft.com/), sign out from your account and then retry.
149+
150+
4. Choose the appropriate login credentials to sign in with two-factor authentication:
151+
- If you are a public officer, use your [WOG ID](term-definitions).
152+
- If you are a vendor, use your [TechPass ID](term-definitions).
119153

120-
- Some applications that SEED depends on require Full Disk Access (FDA) in order to function.
121-
- As of Catalina, users may be required to give explicit consent for FDA.
122-
-->
123-
## Enable Full Disk Access
124-
Enable Full Disk Access is for TaniumClient, Microsoft Defender ATP and Microsoft Defender ATP Security Extension.
125-
*To enable FDA* :
126-
1. Go to the **Apple** menu > **System Preferences** > **Security & Privacy**.
127-
2. Click the **Privacy** tab.
128-
3. From the side menu, choose **Full Disk Access**.
129-
4. Click the lock icon at the bottom and use your Touch ID or enter your password to unlock.
130-
5. Ensure the following applications are listed:
131-
- Tanium Client
132-
- Microsoft Intune Agent
133-
- Microsoft Defender ATP
134-
- Microsoft Defender ATP Security Extension
135154

136-
?> If **TaniumClient** is missing, refer to [Common issues and resolution](#common-issues-and-resolution) before proceeding further.
155+
<!--When greeted with the Microsoft sign-in page, sign in using your WOG ID (i.e. [your\[email protected]](mailto:[email protected])) if you are a public officer, or your TechPass ID (i.e. [your\[email protected]](mailto:[email protected])) if you are a vendor.-->
137156

138-
6. Select the checkboxes beside these applications.
157+
![techpass-sign-in](images/cloudflare-warp-macos/techpass-sign-in.png)
139158

140-
<kbd>![fda-enabled](images/onboarding-for-macos/all-apps-fda-enabled.png)</kbd>
159+
5. Once you have successfully signed in, click the Cloudflare WARP icon.
141160

142-
## Enrol your macOS on Cloudflare using WARP client
161+
![cloudflare-warp-icon](images/onboarding-for-macos/cloudflare-icon.png)
143162

144-
**Prerequisites:**
145-
1. Ensure that you have Cloudflare WARP client installed in your device. If not install it from [Clouhttps://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release](Clouhttps://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-macos-1/distribution_groups/release)
163+
The following screen is displayed.
146164

147-
2. Disconnect from any other VPN that might be running as that could clash with Cloudflare.
165+
![warp-teams](images/cloudflare-warp-macos/warp-teams.png)
148166

149-
*To enrol macOS on Cloudflare using WARP client* :
167+
?> If you need to connect to a different VPN, disconnect and quit from the WARP client.
150168

151-
1. Open the Cloudflare WARP client from the menu bar on the top right corner of your Mac device.
152169

153-
![cloudflare-warp-icon](images/onboarding-for-macos/cloudflare-icon.png)
170+
</details>
154171

155-
?> You can also press ``Command+Spacebar`` and search for **Cloudflare WARP** application to open it.
156172

157173

158-
You will see the information page, followed by your privacy policy.
159174

160-
2. Click **Next** and then **Accept**.
161175

162-
![accept-privacy-policy](images/cloudflare-warp-macos/accept-privacy-policy.png)
163176

164-
3. When prompted to sign in, select **Azure AD – TechPass Prod**.
165177

166-
![gcc-cloudflare-access-signin](images/cloudflare-warp-macos/gcc-cloudflare-access-signin.png)
178+
<!--3. [Ensure your device hard disk is encrypted](#ensure-your-device-hard-disk-is-encrypted).
179+
4. [Enable Full Disk Access(FDA)](#enable-full-disk-access).
180+
5. [Enrol your macOS on Cloudflare using WARP client](#enrol-your-macos-on-cloudflare-using-warp-client)
167181
168-
?> If you encounter an error stating that user account does not exist in the respective tenant, open a new tab and go to [https://myaccount.microsoft.com](https://myaccount.microsoft.com/), sign out from your account and then retry.
169182
170-
4. Choose the appropriate login credentials to sign in with two-factor authentication:
171-
- If you are a public officer, use your [WOG ID](term-definitions).
172-
- If you are a vendor, use your [TechPass ID](term-definitions).
183+
<!--?> If you encounter any issues while onboarding, refer to [Common issues and resolution](#common-issues-and-resolution) section in the appendix before reaching out to the SEED team for support.-->
184+
185+
186+
<!--## Get your macOS device managed by Intune Company Portal app
187+
Enrol your macOS device with the Intune Company Portal app to get a secured access to your email, files, and applications.
188+
189+
*To manage your device by Intune Company Portal app* :
173190
174191
175-
<!--When greeted with the Microsoft sign-in page, sign in using your WOG ID (i.e. [your\[email protected]](mailto:[email protected])) if you are a public officer, or your TechPass ID (i.e. [your\[email protected]](mailto:[email protected])) if you are a vendor.-->
192+
## Ensure SIP is enabled on your device
193+
Make sure SIP is enabled to prevent executions of unauthorised codes.
194+
195+
196+
197+
## Ensure your device hard disk is encrypted
198+
To protect the privacy of your files and user data secured, ensure your device hard disk is encrypted.
199+
200+
*To ensure your device hard disk is encrypted* :-->
176201

177-
![techpass-sign-in](images/cloudflare-warp-macos/techpass-sign-in.png)
178202

179-
5. Once you have successfully signed in, click the Cloudflare WARP icon.
180203

181-
![cloudflare-warp-icon](images/onboarding-for-macos/cloudflare-icon.png)
204+
<!--Note:
182205
183-
The following screen is displayed.
206+
- Some applications that SEED depends on require Full Disk Access (FDA) in order to function.
207+
- As of Catalina, users may be required to give explicit consent for FDA.
184208
185-
![warp-teams](images/cloudflare-warp-macos/warp-teams.png)
209+
## Enable Full Disk Access
210+
Enable Full Disk Access is for TaniumClient, Microsoft Defender ATP and Microsoft Defender ATP Security Extension.
211+
*To enable FDA* :
186212
187-
?> If you need to connect to a different VPN, disconnect and quit from the WARP client.
213+
## Enrol your macOS on Cloudflare using WARP client-->
188214

189215

190-
## Post onboarding notes
191216

192217
<!--- If you encounter any issues during onboarding, refer to [Common issues and resolution](#common-issues-and-resolution) before reaching out to the SEED team.-->
193-
- If onboarding was successful, you will receive an email informing you that your device is successfully onboarded.
194-
- Public officers receive this email in their *GSIB email inbox* while vendors receive it at their *work email address* which was used to create their TechPass account.
195-
- Due to the nature of the verification process, it may take up to an hour to receive this email. if you do not receive it after an hour, please contact the SEED team.
196-
- Shortly after this email, you will receive a desktop notification prompting to restart the device.
218+
219+
If onboarding is successful, within an hour, you will receive a successfully onboarded email to the email address used for your creating your TechPass account.
220+
221+
?> If you do not receive this email, please contact the SEED team.
222+
223+
Shortly after this email, when you receive a desktop notification prompting to restart the device:
224+
197225
1. Restart your device.
198226
2. If prompted to enter your password, enter your password.
199227

@@ -203,16 +231,21 @@ The following screen is displayed.
203231

204232
<!--that **your device has been renamed and will restart in 5 minutes**. This is expected, and the rename is required for SEED to function properly. **Please do not change your device name thereafter**.-->
205233

206-
## Common issues and resolution
234+
## Common issues while onboarding using macOS
235+
236+
<details>
237+
<summary>1. What should I do if profile installation fails while installing the management profile?</summary>
238+
239+
<kbd>![profile-installation-failed](images/onboarding-for-macos/profile-installation-failed.png)</kbd>
207240

208-
1. What should I do if profile installation fails while installing the management profile?
241+
1. Go to the **Apple** menu > **System Preferences** > **Profiles**.
242+
2. If **Management Profile** is already an existing profile, select it and remove by clicking the minus icon at the bottom left corner.
209243

210-
<kbd>![profile-installation-failed](images/onboarding-for-macos/profile-installation-failed.png)</kbd>
244+
</details>
211245

212-
1. Go to the **Apple** menu > **System Preferences** > **Profiles**.
213-
2. If **Management Profile** is already an existing profile, select it and remove by clicking the minus icon at the bottom left corner.
214246

215-
2. While enabling FDA, I can't find **TaniumClient**. What should I do?
247+
<details>
248+
<summary>2. While enabling FDA, I can't find **TaniumClient**. What should I do?</summary>
216249

217250
1. Open the **Terminal** application and enter the command: ``sudo chmod 755 /Library/Tanium/TaniumClient``.
218251
2. Go to the **Apple** menu > **System Preferences** > **Security & Privacy**.
@@ -221,3 +254,5 @@ The following screen is displayed.
221254
5. Click the lock icon at the bottom and use your Touch ID or enter your password to unlock.
222255
6. Click the plus icon at the bottom and from **Applications**, select **TaniumClient**.
223256
7. Select the checkbox beside **TaniumClient**.
257+
258+
</details>

0 commit comments

Comments
 (0)