Support of MacOS at DESY

This web site offers information about the usage of Mac OS within the DESY environment. The target group of this document are users which have first experience with Mac OS. Therefore knowledge about basic terms and the desktop of the operating system is preconditioned!

Introduction

The standard Desktop Computing at DESY which is currently completely supported by IT (January 2010) includes the support of the operating systems Windows and Linux in standardized configuration on defined standard hardware.

But in the last time we observe that in particular the number of external users on the DESY campus who use Apple notebooks ("Macs") with the operating system Mac OS increases. These guests need access to DESY computing resources like network, printers, file systems etc. To meet these requirements, IT now (June 2009) supports such systems. Therefore the IT help desk, the socalled User Consulting Office (UCO), can now be officially contacted for questions concerning these issues and supports at best effort.

News

On 16.10.2014 the new operating system version MacOS 10.10 (Yosemite) has been published by Apple. Since then the operating system can be upgraded to this new version. But this operating system version brings some problems with it. With the following web site we want to point you on them and ask you to notice before you upgrade, if possible. If you have already upgraded your device to the new version this web site is for your information. https://it.desy.de/services/uco/documentation/macos_yosemite_upgrade/index_eng.html (Available in German, too)

 

Content Overview of this Document


Security / Virus Scan

The usage of the DESY IT services is subject to binding basic conditions like e. g. the conditions of use at DESY. Further information you can find on the web sites of the RSR (Rechnersicherheitsrat) http://rsr.desy.de and of D4 d4.desy.de (Both only available from the internal network).
Security guides for configuring Mac OS in consideration of security aspects you can find on http://www.apple.com/support/security/guides/ (Unfortunately only available for 10.6 or older, PDF, English only)

DESY provides a mailing list for apple relateted security information named mac-cert@desy.de. To subscribe this mailinglist simply send an email with the subject "SUBSCRIBE mac-cert" (without quotes) to sympa@desy.de. Or login to https://lists.desy.de/sympa/, chose the mailinglist and click on "subscribe".

Furthermore since June 2011 DESY provides licenses for the McAffee Virus Scan for MacOS. You can get one license via AMS (https://ams.desy.de). If you do not have access to the AMS please ask one of your group administrators or send an email to uco@desy.de.


WLAN

On the Task Bar you can see whether the WLAN interface of your Mac is active and connected to a WLAN network or not. When you click on the WLAN symbol (see image on the right) you will see all available WLAN networks which are in reach. The small lock behind some networks indicates that the network uses encryption and needs authentication. This menu also gives you the option to activate/deactivate the WLAN interface (AirPort).
More information about this issue you can find on the corresponding network web sites WLAN at DESY or WLAN instruction to learn how to configure WLAN on your Mac.


Network Configuration (Ethernet)

In the System Preferences of the Network Interfaces you can find a list of all available communication interfaces as well as corresponding details. Using this menu you can activate, deactivate and configure the interfaces.

The screenshot which you can see on the right shows the standard configuration of the ethernet interface for the DESY internal and the guest network. Various information for the guest network and for the internal network will be acquired by the Mac automatically once the configuration is set to DHCP. More general information about Ethernet at DESY you can find on http://it.desy.de/services/networks/lan/index_eng.html.

Registering your Device for the DESY Intranet

For registering your device for the DESY Intranet please refer to your segment administrator. If you do not know the name of the responsible person please call the User Consulting Office (uco@desy.de; ext. 5005).


VPN Connection to the internal DESY Network

Note: It is necessary that the VPN resource is enabled for your DESY account in the Registry. If you don't have this resource or if you are not sure please ask one of your Registry administrators. If you have any questions you can also contact the UCO (uco@desy.de, ext.: 5005).

Since MacOS 10.6 (Snow Leopard) the operating system brings a CISCO VPN client with it. The client is fully integrated to the system and can be configured via the network preferences of the system.

So you don't need any additional software. All you have to do is to click on the Network/WLAN symbol on the task menu and open the network preferences. There you click on the "+" button (see figure 1) to add a network connection.
In the next window (figure 2) chose "VPN" as interface and "Cisco IPSec" as VPN Type. If you want to you may also change the Service Name to e.g. "DESY VPN". When you are done press the create button.

After that you come back to the main menu of the network preferences (figure 1). There you must configure the VPN gateway (vpn.desy.de) and type in your user name (your general DESY account name).

The last thing you have to do is to configure the VPN group name. To do this please click on the button Authentication Settings and you will get the window which is shown in figure 3. The group name is desy. If you don't know the password which belongs to the group name please ask one of your group administrators or the UCO.

If you are also done with this please click OK, click on the connect button (figure 1) and enter your login data when the VPN client asks for them to establish the VPN connection.

If you should not be able to connect via VPN anymore from one day to another and your password is still valid it is possible that your device need a reboot.

fig. 1

fig. 2

fig. 3