AutoPkg in the Cloud | JNUC 2021

To ensure that SAP’s Jamf Pro management service for macOS has the latest software installers available, the Mac@SAP team has long used the open source tools AutoPkg and JSSImporter to detect and download updates for specific software, perform the actions necessary to create software. installers and upload them to our Jamf Pro server in the Jamf Cloud. To improve this service while reducing administration overhead, the Mac@SAP team recently moved their AutoPkg to macOS instances hosted in the cloud by Amazon Web Services. However, with change comes new challenges. To satisfy the requirement that all installation packages created for Jamf Pro be signed with an Apple Developer ID installer certificate, all software for which AutoPkg is required to create an installation package is signed with an Apple Developer ID installer certificate. Apple Developer ID issued to SAP. To securely provide this signing certificate to new AutoPkg instances on AWS, a support system has also been set up in AWS that uses TwoCanoes Software’s Signing Manager tool to support AutoPkg’s ability to sign these installation packages. This session will cover how SAP is using AWS services, AutoPkg, JSSImporter, and Signing Manager to quickly and securely deliver software to our Jamf Pro server and from there to our users’ Macs.

Source Link