DDS - Remote Setup Guide (Macs)

Last Updated: 08/12/2020
Layout:
One Column
Two Column
This tutorial is operating system independent.

Overview

DDS users should follow this guide to remotely set up new Apple computers on their own. If you need assistance at any time, please reach out to a DDS technician using the DDS service request portal

Step

To begin, unbox your device and plug the power cable into the computer. Make sure your Wi-Fi is working and turn on the computer. After starting your computer, Apple Setup Assistant will walk you through the initial setup of your device. This is a quick guide on which settings to choose or be aware of. 

On the Welcome screen, select United States from the dropdown country list then click Continue.

Step

The default options are selected based off the Global Region you previously selected. If you chose United States these will be set to English (US).

Step

Connect to a network. Select your home network and enter the password. Click Continue to connect.

Please note: If you are unable to connect, the Setup Assistant will ask you if you want to continue without a connection. Do not move on if you are unable to connect to a Wi-Fi network. It is required to apply the University of Colorado settings. Troubleshoot your home network and ensure it is working before continuing.

Step

You will be prompted to allow the University of Colorado to manage your computer. After you click Continue to accept the management profile, you will be prompted for your username and password. 

Step

Enter your IdentiKey username and password and click Connect. Your computer will install the software and profiles needed to manage your device.

Step

Click Continue to accept Apple’s Data & Privacy agreement.

Step

You will be prompted to transfer any information from an old machine to the new one. For now, select Don’t transfer any information now and click Continue. Your DDS Professional will assist with any necessary data transfers once the machine has been fully set up.

Step

If you know your Apple ID and password, feel free to sign in during this step. You can skip this step and enter it in the future when you need to use it.

Step

After signing in during the Remote Management step, your account will be pre-filled with your IdentiKey username and password. Do not change the username or password fields but please enter your Full Name. You can add a password hint which will display if you fail to login three consecutive times. Finally, you can select an account icon if you have a preference. Click Continue to finish account creation. 

Step

Select Enable Location Services on this Mac and click Continue. This setting is recommended as it will allow your computer to set the clock to the correct time zone you are in, as well as help web browsers find results nearest to your location. 

Step

If you would like to use Siri on this device, feel free to set it up now. However, if you do not want to use it or if you want to set it up after your computer has finished set up, uncheck Enable Siri and click Continue.

Step

Some newer Macs come with a fingerprint sensor that you can use to quickly unlock your machine. If you would like to use the fingerprint sensor on this device, follow the directions to set it up. If you do not want to use it or if you want to set it up after your computer is configured, select Set Up Touch ID Later then Continue.

Step

Select your preferred theme for this device. Options include:

  • Light: The normal MacOS theme with white backgrounds and black text.
  • Dark: inverts normal colors, so you have black backgrounds with white text.
  • Auto: Changes depending on the time of day (available on newer machines\). 

Step

True Tone Display will change the brightness of your screen depending on the time of day. This setting can be turned on or off at a later time.

Step

Upon successful completion of Apple Setup Assistant, DDS Remote Management software will begin to install the necessary components needed to get you started. You will be prompted by the following message to let you know it has begun. Please refrain from opening any apps or changing any settings during this process unless prompted to do so.

Step

After installing the software needed to manage your local account, the DDS Get Desktop Support shortcut will install on your desktop in case there are any issues with the rest of the setup.

If you have any issues before this appears you can open a web browser and visit the DDS service request portal to submit a request for help with your DDS Professional. 

Step

Next, Cisco VPN will be installed on your machine. This will allow you to connect to the University of Colorado network and sync up your local user account credentials with your IdentiKey credentials. Once installed you will be prompted to start the VPN.

Step

After starting the VPN, please connect to UCB VPN with your IdentiKey and password. If the server field is blank (and there is no UCB VPN option from the drop down) please type vpn.colorado.edu into the server field.

Step

As soon as you connect to the University network via the Cisco VPN, you will be prompted to sign into the KerberosSSO Extension. This tool is used to continuously sync your local account password with your identikey password. This tool doesn’t require you to come to campus to sign in for the first time and will automatically ask you to resync your passwords if you ever have to change your IdentiKey password.

The prompt will ask you for credentials to the Domain: AD.COLORADO.EDU.  Please enter your IdentiKey username and password into the prompts and hit Sign In.

When asked if you want to Sign in Automatically select Yes. (Please Note: This only automatically signs you in to the password sync tool, not into your computer.)

Step

Next, you will be asked to enter your Active Directory password and login password. Please use your identikey password for both of these fields and click Sync Password.

(Please Note: if you accidentally changed the account password during Apple Setup Assistant please enter that password into the login password field and it will be changed to your identikey password.)

Step

Once signed in to the KerberosSSO Extension, you will be alerted that your password has been synced and you are asked to log out and log back in to complete the sync. Make sure to plug your power cable into the computer before logging off. If you do not have the power cable plugged in the FileVault encryption will not begin.

Step

Select Log Out when the Apple Log Out menu appears.

Step

During this first logout FileVault Encryption will begin on your machine. To begin the encryption please enter your identikey password into the box and hit OK.

Once your password is confirmed, you will be informed that FileVault is enabling. Click OK and wait to continue until you are prompted with your FileVault encryption key. 

Step

Once fully enabled, you will be provided with a FileVault Recovery Key. This key is used to decrypt your data in case you forget your password or are unable to log in. Due to the sensitive nature of this encryption key, DDS will automatically reissue a hidden copy of this key and store it in a secure digital vault. In the event you need to use this key, contact your DDS Professional to help unlock your computer.

After you have received this prompt, log back into your user profile with your identikey password. 

Step

Upon logging back in you will be asked to create a ticket with your DDS Professional to set up an appointment for any additional setup that can’t be done automatically. This includes signing into any apps, setting up department specific software, setting up automatic backups, etc. 

After creating a ticket please let your computer sit for 30-60 minutes while the rest of the standard CU software is installed in the background. This includes Microsoft Office 365, Chrome, Firefox, Teams, etc.