Backblaze Mass Silent Install with Jamf (Mac)

The Backblaze installer can be deployed silently using Jamf, a managed software installation tool (https://www.jamf.com).

The following instructions are for macOS deployments and will allow your group administrator to create Backblaze accounts for each computer, to backup each of those computers, and to have those accounts all be managed under one Backblaze group. 

Looking to deploy using Jamf for Windows clients? Click here.

 

Prerequisites:

Jamf Setup

  • Jamf Pro server (formerly JSS) is either hosted on a server or in the Jamf Cloud.

  • Jamf Pro - this suite includes tools such as Jamf Admin/Imaging/Remote, Composer and Recon (these tools were formerly known as Casper tools).

Backblaze Setup

  • A Backblaze account set up for the admin with the groups service enabled.

  • A group has been created in the Backblaze account.

    We strongly encourage the admin to edit the group properties of the group to automatically approve membership requests. This can be done in the Group Management area of the group admin account by clicking Edit Group button, checking the box for Automatically approve member requests from ANY domain, and clicking the Update Group button. Or input your company domain name into the Automatically Accepted domains section and click the Update Group button.

    If desired, this setting can easily be disabled after the mass deploy is completed.

  • The admin knows the group ID and group token.

    The group ID and group token values can be found by:
    • Signing in to the group admin’s Backblaze account.
    • Go to the Invite & Approve page. Select the appropriate group from the pull down list.
    • Click on the Advanced Instructions button in the Advanced Deployment section.
    • Under Advanced Deployment Instructions, choose the Mac tab.

      The group ID and group token are listed in the example usage command. In the listed example, the backblaze installer is shown with several flags, one of which is the “-createaccount” flag, which takes 4 parameters. The last two parameters are the group ID and the group token.

      For example, if you see this:

      sudo /Volumes/Backblaze\ Installer/Backblaze\ Installer.app/Contents/MacOS/bzinstall_mate -nogui -createaccount user@corp.com password-goes-here 11001 wdloryiyqyrmnizvy54q7lar27

      the group ID is 11001 and the group token is wdloryiyqyrmnizvy54q7lar27.

  • Download the Backblaze installer for Mac, install_backblaze.dmg (which can be found here).

Setting up Jamf to deploy Backblaze on Mac:

  • Create an API User Account for BackBlaze to complete API call

    Give the account only read access to “Users”

  • Upload the Backblaze Silent Install script into Jamf Pro server repository (JSS)

    Name the input parameters of this script; parameter 4 is “Group ID” and parameter 5 is “Group Token”.

    Update our sample Backblaze Silent Install script with the exact url of your JSS and with your username:password pair (the user that has read privileges to “Users” in your system).

    Here is our sample Backblaze Silent Install script.

 

#!/bin/bash

#These are for debugging
set -x
set -euo pipefail

backblaze_grpID="$4"
backblaze_grpToken="$5"

#By default $3 is the username parameter for scripts in Jamf

userName="$3"
response=$(curl https://myjss.com/JSSResource/users/name/$userName --user username:password)


#Jamf API’s can return XML or JSON, this parses and grabs the email from XML.
emailAddr=$(echo $response | /usr/bin/awk -F'<email_address>|</email_address>' '{print $2}')
echo About to run the Backblaze installer with this command:


#Note the directory to which your Backblaze installer is installed can be specified within the policy, JAMF default for the policy is to run on boot drive

echo /Applications/Backblaze\ Installer.app/Contents/MacOS/bzinstall_mate -nogui  -createaccount "$emailAddr" none "$backblaze_grpID" "$backblaze_grpToken"

/Applications/Backblaze\ Installer.app/Contents/MacOS/bzinstall_mate -nogui  -createaccount "$emailAddr" none "$backblaze_grpID" "$backblaze_grpToken"

echo Finished running Backblaze silent installer

 

  • Modify and Upload the Backblaze Installer dmg file into Jamf Pro server repository (JSS)

    First you will need to modify the install_backblaze.dmg file downloaded from Backblaze in order for the Backblaze Silent Install script to work. You only need to do this once:

    • Mount the official Backblaze DMG
    • Open Jamf’s Composer application on a clean system
    • Click “New”, select normal snapshot, then press next
    • Once the initial snapshot is done, copy the BackBlaze installer from to your applications folder
    • Then build out your new package as a DMG from Composer
    • Upload this new DMG to your distribution point using Jamf Pro Admin (formerly Casper Admin)
    • Call this new DMG Jamf_Backblaze.dmg to distinguish it from the original

  • Create the Policy

    • Create a new policy (i.e. Backblaze)
    • Set trigger as desired
    • Add Jamf_backblaze.dmg as a package in this policy
    • Add the Backblaze Silent Install script as a script in this policy
    • Upload an icon
    • Set scope as desired

 

Once the policy runs, the Backblaze client will be installed and start backing up the computer immediately.

 Example:

Screen_Shot_2017-10-11_at_3.46.05_PM.png


Once Installed:

If you added members to a non-auto accept group, the group admin will need to accept these users from the Requesting Membership list on the Invite & Approve page of the group admin account.

Please ask your group members to follow the Forgot Password directions from this help article to set an initial password if you used “none” for the password in the script.

Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk