Provisioning a Mac OSX Shared Device to the WiFi network

Information and Purpose:

• Provisioning a school district a school district shared asset adds authentication information to the device.

• This is for devices used by more than one person, such as desktops in a computer lab.
• If a device has more than one local account, each account will have to be provisioned.
• Once provisioned, the device will be able to authenticate a different user through the network login portal each time it is logged out of the local account.

1. Connect your wireless to PhilaSD WiFi Guest

2. Open a web browser such as Chrome or Firefox

3. The Network Login window will open

1. Note: If the Network Login screen does not appear, enter a non-district website in the browser, such as “captive.apple.com”

4. Select “Authorized Personnel” towards the bottom of the screen to provision a shared device

1. Note: If you choose to login without provisioning, you will only be given web access
2. Note: Shared devices, once provisioned, will allow a user to log in to the Network Login portal each time the device is logged out of the local account and re-logged in. Logging into this portal will give the proper access to a student, employee, or guest.

5. This will present you with the SDP Device Provisioning steps

1. Authenticate your session using the shared asset account credentials provided to authorized personnel in the Shared Device Provisioning window Note: Your personal school district username and password should not be used to provision a shared asset..

6. You will be required to install a unique certificate, and profile onto each provisioned device..

7. Click on the Install Certificate link.

8. Click OK to trust the new certificate authority (May not apply in all scenarios)

Note: Leave the checkboxes blank.

9. Following the installation of the certificate, you will be prompted to install a profile to configure network settings.

10. Click ok to open the mobileconfig file with System Preferences.

11. Install the device enrollment profile by clicking install or continue on the next two windows (Language may vary depending on different versions of OS)

12.  Click Continue to configure device enrollment certificates, then click Install

13. When prompted, enter your local user name and password. This is typically the credentials you use to log into your device.

14. Once complete, click on the red radio button to close this window.

15. The last screen will confirm that the machine was provisioned. Your machine is now configured to log into the secure network.

16. Connect your wireless to PhilaSD WiFi Secure.  If your device does not have the Clearpass Onguard Agent (Health Assessment Application) installed, you will be prompted to do so before you can continue.

17. The Device Health Status window will open

1. Note: If the Device Health Status screen does not appear, enter a non-district website in the browser, such as “captive.apple.com”

18. Click the link to download the ClearPass Onguard Agent

19. Click on the clearpassonguard.dmg

Note: If not installed automatically, the installer will be in your Downloads folder.

20. When the window opens click on the box to install the package

21. Click continue

22. Continue installing the software.

23. Enter your username and password. This is typically the credentials you use to log into your device.

24. Installation is now complete!

25. The Clearpass Icon will appear in the menu bar.

Healthy       Unhealthy     Scanning

26. Once scanning is complete, your icon will turn green or red.  If it is green, you will have access to the network.  If it is red, please contact the Help Desk at 215-400-5555.

27. At this point, you will be presented with the Network Login screen.  You can log into this screen with your credentials and get the appropriate access (not just guest access).  After 20 minutes, you can log out of the local account and log back in to be presented with the Network Login again for a new user. This workflow is to accommodate students logging in after each period of class.