Blog

Fixing authentication failure in Startup Security Utility

After migrating my 2018 MacBook Pro from a 2017 MacBook Pro, I found that I could no longer authenticate in the Startup Security Utility on the recovery partition of 10.13 (High Sierra). The 2018 MacBook Pro had FileVault turned on and the 2017 MacBook Pro did not. I investigated some different methods to resolve this, and…

READ MORE

Blog

MacAdmin Sticker Pack Now Available on iOS!

At this year’s PennState MacAdmin conference, we gave out over 500 sticker packs to attendees, and folks loved them. Since we had the graphics and people enjoyed them so much, we created stickers for iMessage on iOS and put them up in the App Store. Show your #macadmin love by download the stickers now on…

READ MORE

Blog

Automating macOS and Package installation from the Recovery Partition

With the death of netboot and imaging, there is a need for automated refreshing of the macOS and initial package installation. Apple is moving towards using DEP and MDM, but that is not applicable for all scenarios, and tools such a bootstrappr and installr have come up to fill a need. These command line tools run…

READ MORE

Blog

Disable SIP quickly

Update: It looks like this no longer works and was deemed a security issue and fixed. Booting into Recovery mode can take a while since the UI has to load and a full disk check is done.  There is a way to get into SIP faster: by going into single user mode in the recovery…

READ MORE

Blog

PSU MacAdmins 2018

The 2018 MacAdmins conference is coming up fast and we are pulling out all the stops. We have a bunch of new updates and products to show off: Winclone 7 Pro: Enterprise Boot Camp Windows 10 Deployment. We have some exciting new developments on using Microsoft images and services to deploy Windows 10 to Macs, including…

READ MORE

Blog

Imaging Boot Camp with SCCM

I am really proud of the work we did on getting Macs to boot into a WinPE environment and imaging via MDT / SCCM. Check out the web seminar I did earlier this week that shows setting up a package to boot macs to WinPE.

READ MORE

Blog

Road to Winclone 7

Today we released Winclone 7, and it is the most ambitious release yet. Winclone images, migrates, and restores Boot Camp partitions on the Mac, both for consumers and for mass deployment in enterprise environments.

READ MORE

Blog

Introducing Certificate Request

We are releasing a new app here at Twocanoes Software, and this is one that is especially exciting for me. The app is called Certificate Request and it makes it a breeze to get digital certificate from Active Directory to your key on your Mac.

READ MORE

Blog

TCM 1.1: Screen Sharing

We just released TCM 1.1 with a huge new feature: Screen Sharing. We have seen a bunch of folks in education loving it and see TCM as “Apple Classroom for Macs”. It was missing one key feature, though: screen sharing. So with the release of TCM 1.1, instructors and IT folks can automatically start screen sharing and connect to student macs with a click of a button.

READ MORE

Blog

Switching between File-based (WIM) and Block-Based imaging in Winclone 6

Winclone 6 can clone and restore in 2 different modes: file-based (WIM) or block-based.  The differences are covered in the kbase article here. By default, Winclone 6 creates images using file-based imaging. If there are issues with the meta-data on a file (such as corrupt permissions, date, etc), Winclone may fail to complete the clone….

READ MORE

Blog

Getting a Machine Kerberos Ticket on macOS without binding

The TCS Cert Request tool can be used to request a certificate from Active Directory Certificate authority.  A normal operation is to request a certificate as either a user or the computer. Both require a valid Kerberos ticket. Getting a kerberos ticket as an macOS user is easy. You just need to know the user…

READ MORE

Blog

How the AD Certificate Profile got into macOS when I was at Apple

I have created a macOS command line tool called “tcscertrequest” that submits requests to a Microsoft Certificate Authority from the macOS command line. The request is sent the same way it would be sent from a Windows computer so no modifications to the Windows infrastructure is required to work with the Mac. The history of…

READ MORE

Blog

SecureBoot & the 2017 iMac Pro

SecureBoot One of the areas that Apple has made big improvements with the release of the 2017 iMac Pro is the introduction of SecureBoot.  SecureBoot is a process where the firmware validates the bootloader prior to loading.  It is at the start of the chain of trust that ensures that code that gets run (drivers, kernel,…

READ MORE

Blog

Missing Windows Drivers

When moving Boot Camp from one computer to another, missing drivers can cause problems. Anything from the keyboard and mouse not working to Windows not booting. In fact, newer Macs require a SSD driver for Windows to boot correctly. Thankfully, you can inject drivers right into a Winclone image so that when you restore the…

READ MORE

Blog

iMac Pro 2017 Questions

The iMac Pro 2017 arrives in the office in 2 days, and I have a bunch of questions that I want answered. We need to be able to support the iMac Pro for Winclone and Boot Runner, but more importantly, the new security features and secure boot are expected to be in future models of…

READ MORE

Blog

Different block size of SSD in the same model MacBook Air

One of the things that Apple has been pretty consistent over the years is that a specific model Mac will have the same hardware if the part number is the same. The PC world is not really like.  When I was creating images for Dell laptops back in the day, the same model laptop purchased…

READ MORE

Blog

iBeacons and ARKit

iOS 11 introduced ARKit with some pretty amazing interactions.  You can interact with virtual elements in the real world with your phone. While ARKit is aware of the geometry of the room the phone is in, it doesn’t know what room it is in. That is where iBeacons can add a new element to interaction…

READ MORE