On Friday, Apple released an update titled “Incompatible Kernel Extension Configuration Data: Version 3.28.1”
This update was an exclude list of bad Kernel Extension’s for 10.11 & included an Apple Kernel Extension.
Below is some more information on this & a possible way to detect affected Macs via the JSS.
If you manually download a Configuration Profile from the JSS, you’ll see that the profile largely reads as gobbledegook.
Luckily a couple of bash commands later & you’ll have a readable profile.
Way back in Jan 2014 grabbed a test iPhone & after charging I was greeted with the above.
After various exclamations along the lines of “Holy fishsticks, Batman!” we did get the iPhone enabled & this did not involve a time machine or me waiting the 23,053,554 minutes for the device.
Below is how & some guess work as to what happened.
Sometimes being an Apple admin in an org with a largely Microsoft infrastructure can be a bit of a chore.
It’s not uncommon to hear of Windows admins dismissing issues as being an “Apple” issue without actually expending any effort to look into the issues at all.
However, I’ve been fortunate in that I’ve been able to bend the ear of several sympathetic Windows admins & this has lead to posts such as “How To: Check Your Active Directory Domains Time” & “OSX & AD Certificate Requests, some tips”.
This post is another of those ilk & one that came up quite recently in the MacAdmins.org Slack & I mentioned this in my JNUC 2015 talks Q&A too, thought it would be a good time to share.
If your environment is based around Active Directory, chances are you may leverage Active Directory Certificate Services (ADCS) as your internal public key infrastructure (PKI). The certificates from which may be used to authenticate clients to various services within your organisation.
As MacAdmins, we may need to configure our Macs to request certificates from our ADCS, below are some hopefully helpful tips that might make that easier.