Beginning with FileWave 12.2.0 the App Portal Kiosk is fully customizable within the constraints of CSS and can be applied via a style sheet file. Existing devices that use the App Portal Kiosk Web Clip will be styled immediately. Devices with older versions of the App Portal mobile app before 12.2.0 will simply ignore the styling. Apr 27, 2018 The 5.7 version of FileWave for Mac is provided as a free download on our website. This Mac app was originally produced by FileWave, Inc. The application is included in System Tools. The most popular versions among FileWave for Mac users are 5.7 and 5.2.
- Filewave Kiosk (free Version Download For Macbook Pro
- Filewave Kiosk (free Version Download For Mac Windows 7
- Filewave Kiosk (free Version Download For Mac Windows 10
- Filewave Kiosk (free Version Download For Mac Windows 10
Setting Up MDM for Mac Enrollment
The FileWave MDM Server requires two certificates - one to send push commands to Apple and another for Mac and iOS devices to communicate securely with the MDM Server. The features that require your Macs be enrolled in MDM are
- Mac App Store app deployment with device-based volume licenses
- Remote MDM wipe of a Mac with 6-digit unlock passcode. This unlock passcode is enforced by the EFI firmware. You can still wipe a Mac without enrolling it in MDM but you will not be able to lock it after it's been wiped.
- FileVault 2 key escrow when enabling FileVault via a config profile
To create and upload an APNS certificate follow the instructions at one of the following links depending on your platform - Mac, Windows - if you have not already done so. The Windows Certificate Wizard and Mac Certificate Assistant Script are available here to facilitate the creation of your APNS. They will walk you through the same steps as the above guides.
Since the APNS certificate must be renewed annually, we recommend you create calendar reminders 45, 30, and 15 days before the expiration. When renewing your APNS certificate, be sure to use the same Apple ID that was used to originally create it. It's probably a good idea to include the Apple ID in the calendar reminders to renew your APNS certificate. Creating a new certificate, or creating a certificate with a different Apple ID, rather than renewing the existing one used by FileWave, will break MDM communication with your Macs and require un-enrollment and re-enrollment. This will break the above client features that require MDM but non-MDM-based features that depend on the native FileWave client will continue to work fine. Management functionality handled by the FileWave native client rather than push notifications will continue to work. Take the following precaution to prevent this.
- Click the Info icon for your APNS certificate in your Apple Push Certificates Portal account and enter the DNS name for your server in the Notes field. This lets you know which server it is intended for.
- Verify that the topic for the APNS certificate you’re trying to renew matches the topic listed in the Mobile tab of the FileWave preferences. If they don’t match then you’re renewing the wrong APNS certificate.
Next you’ll need to upload a certificate to secure MDM communication between FileWave and your Mac if you have not already done so. Note that the DNS specified for your FileWave server in the Mobile prefs tab must be covered by your SSL cert uploaded in the General prefs tab.
- In the General tab of the FileWave preferences, click the Upload PKCS12 Certificate button in the SSL Certificate Management section if you already have an SSL cert in .p12 format from a trusted CA, and authenticate. If you do not have an SSL cert from a trusted CA and will only be managing computers without any mobile devices a self-signed certificate will suffice.
Skip this step if you've already uploaded an SSL cert from a trusted CA. To tell the FileWave server to generate a self-signed certificate, open a commandline session on the FileWave Server and run the following command, replacing '<FW_server_FQDN>' with the actual DNS name for your FileWave server. For Windows remember to open the CMD session with Run as administrator.
- The Common name field in the HTPPS Certificate Management section of the Mobile preferences tab should now be populated with the DNS name for your FileWave server.
While this step is optional we recommend you complete it anyways so you can test manual interactive enrollment of a Mac to verify that MDM enrollment works.
- In the FileWave Admin console go to Assistants > Enroll iOS Device > Mass Enrollment and click the Download MDM Enrollment Profile button.
- Copy the MDM Enrollment Profile.mobileconfig file you just downloaded to a Mac that you'd like to enroll in MDM and double-click it to begin the profile installation.
- Click through the Continue and Install buttons and enter your admin credentials when prompted.
- To verify that the MDM enrollment profile was installed successfully open the Profiles prefs pane and check that the FileWave MDM profile shows in the list of installed profiles.
Enrolling Your Macs in MDM
Your Macs must be enrolled in MDM for you to 1) deploy Mac App Store applications with device-based VPP volume licenses, 2) to MDM wipe it remotely and enforce a 6-digit unlock code, and 3) to escrow the FileVault 2 recovery key when enabling encryption. You can still do a standard wipe of a Mac without it being enrolled in MDM via the FileWave client itself but the end user can simply reinstall the OS. The advantage of the MDM wipe is that the end user cannot reinstall macOS and the Mac is essentially bricked until the 6-digit unlock Find My Mac code is entered. Follow the instructions here to create a Mac fileset to automatically enroll your FileWave Mac 10.12 and under clients into MDM. When deployed to a 10.13.2 and higher Mac the enduser must open the Profiles prefs pane to approve the MDM enrollment profile to enable UAMDM. The 'Enrollment Approved by User' inventory item tells you whether a Mac is UAMDM enrolled or not.
If the MDM enrollment profile is removed from the client Mac it's device entry will listed in red in the FileWave Admin console. The Unenrolled info field in the Client Info window for the Mac will also report 'true'. The device is still manageable via the FileWave client but the aforementioned features that rely on MDM will cease to work.
Buying Mac App Store Apps in the VPP App Store
Log into your Apple VPP account at https://vpp.itunes.apple.com or https://school.apple.com and purchase your apps. Even if the apps are free you still need to purchase VPP licenses for them at a cost of $0. Do not over-purchase licenses. Only buy as many as you think you'll need. You can always buy more later if needed. For example, if there are 1000 students in your school do not purchase 200,000 licenses. More licenses will increase syncing time with Apple's VPP license servers. It may take anywhere from a few seconds to 30 minutes (usually a few minutes) for Apple to generate licenses for your app purchase, depending on the number of licenses. You will receive an email confirmation from Apple once the licenses are available for use. Often it is faster to simply refresh your purchase history in the VPP portal. The app purchase will display 'Managed Licenses' for the status if the licenses have been successfully issued. If you have an Apple School Manager account then the screenshots may differ than those in the instructions below.
Filewave Kiosk (free Version Download For Macbook Pro
Downloading Your VPP Token
- Legacy VPP Token - Log into your Apple VPP account at https://vpp.itunes.apple.com if you are not already logged in, click your account name in the upper right, choose Account Summary, and click the Download Token link on the right.
- ASM Location-based VPP Token - Log into your ASM account at https://school.apple.com, go to Settings on the bottom left, pick Personal Settings > My Profile > Apps and Books in the center pane, and select a location-based VPP token from the right pane to download.
Adding Your VPP Token to FileWave
Filewave Kiosk (free Version Download For Mac Windows 7
- Log into the FileWave Admin, open the preferences, go to the VPP & DEP tab, click Configure Tokens, and enter your FileWave superadmin credentials.
- In the Edit VPP service tokens window click the plus sign.
- At the VPP service token window enter a Token name, Department, Owner, Owner email, click the Import button, and browse to the VPP token file you previously downloaded from your VPP account. It is very important that you enter the Apple ID for this token into the Owner email address if you will be adding multiple VPP tokens. This lets you more easily determine which VPP account to log into to purchase additional volume licenses for apps that are running low.
- Click the Choose button to select the default fileset group App Store filesets should be added to and click the Save button.
- Click Close at the Edit VPP service tokens window.
- Back in the VPP & DEP preference tab click the Synchronize button to force the FileWave server to generate filesets for your VPP App Store apps and retrieve their licenses from Apple. The next time you purchase a new App Store app with VPP licenses return here and click the Synchronize button if you do not want to wait for FileWave server to automatically download the licenses, which can take up to 5 minutes.
- When notified that unused VPP licenses are detected and asked if you would like to create new filesets click the Yes button.
- Select 'Assign to Device' for Preferred license distribution model for new associations and click the OK button at the bottom.
- Your VPP applications should now appear in the Filesets section prefixed with 'macOS App -'.
To verify the license counts that you have purchased go to the License Management section. Your VPP apps should be listed there with with the license counts in the Owned column.
Assigning VPP Apps for Deployment
Now that your VPP volume licensed app has been added to FileWave as a fileset, it can be associated with Mac clients just like any other fileset. Note that associating a VPP app with a Mac will reserve and consume a volume license, even if the app has not yet installed on the client device. The only exception to this is if the app is marked as a Kiosk app. Mac App Store apps are not physically stored on the FileWave server but are installed from the Mac App Store via a push notification. Because of this it takes at least 15 minutes for assigned Mac App Store apps using a device-based VPP volume license to appear on clients. If you are deploying a lot of or some very large Mac App Store apps consider setting up a macOS Caching Server on your network.
To deploy your Mac App Store fileset you must assign it to a device group or individual device with an association. Note that filesets assigned to standard group will be inherited by all its child groups if it has any.
- Go to the Associations section of the FileWave Admin console, highlight one or more Mac App Store filesets in the upper right Filesets pane, and drag and drop them onto the desired client group or client device in the upper left Clients pane. You can block-select adjacent filesets with the Shift key and non-adjacent filesets with the Command key (Mac) or Control key (Windows).
- The associations will appear in gray in the Associations pane at the bottom. Double click the association and go to the Timing tab to set scheduling options for the fileset. This must be done for each association individually if you have created multiple associations. To make the app available on-demand enable the Kiosk Association checkbox.
- Switch to the License Distribution tab, pick Assign License to Device if it's not already selected, and click OK.
- Click Update Model in the toolbar to save your changes to FileWave.
Monitoring Fileset Deployment and VPP License Usage
To track the assignment and deployment of a specific fileset, select it in the the Filesets section and click the Report button in the toolbar. Mac App Store filesets can have the following statuses.
- Mac App Store license associated - A VPP license for this app has been reserved for client Mac
- Available in Kiosk - Assigned and available in Kiosk but enduser has not installed fileset
- Installer running now - Application is currently installing on client Mac
- Installed via Mac App Store - Application is finished installing on client Mac
Return to the License Management section and you'll notice that the Installed column will report the same count for your application as the total number of clients in the the fileset report minus the 'Available in Kiosk' entries for the same application. This count includes all VPP licenses that have been associated with client devices regardless of their installation status, except for 'Available in Kiosk'.
Applications that are within the the low license count threshold will appear with a yellow dot and 'Warning License Watermark' for the Compliance Status column. Applications with more available licenses than the low license threshold will appear with a green dot. To set a low license threshold for your VPP app select it, click the Edit License button in the toolbar, enter a value, and click Save.
Filewave Kiosk (free Version Download For Mac Windows 10
Keeping Mac App Store Apps Updated
Filewave Kiosk (free Version Download For Mac Windows 10
If a new version of an App Store app is released, the FileWave server will automatically send an InstallApplication command to the client to update the app.