USB Restorable - Certificate Error from JSS about autocaspernbi

[macmule]

Hi mturnerfmr,

Can you please paste into a reply the AutoCasperNBI log from ~/Library/Logs/AutoCasperNBI. Ideally the one from when the DMG was created.

Also, the ~/Library/Preferences/com.macmule.AutoCasperNBI.plist.. Again from the Mac used to build the DMG.

On the DMG, can you post the ~/Library/Preferences/com.jamf.casperimaging.plist?

Lastly, can you post a screen shot of the system keychain.. There should be the cert of your JSS there, if it is.. Can you double click it & show the trust levels.

On 23 Jun 2015, at 15:36, mturnerfmr [email protected] wrote:

Have built a restorable DMG as well as utilized the DMG created for netboot and applied it to the USB stick. Both methods work for created the DMG, during both methods build time i see it run the step to import the certificate from the JSS. Both have a cert in the correct location, System, when I boot from them. Both throw the error below either at start of build or during the build itself. Continue lets it proceed but after reboot the build process sits at a finishing screen which has no user input available. I believe that it has thrown this message again. The build never finishes.
Is there something I am missing? Why would this happen if it ran the cert import and it appears to be in place?
Very new to Casper, have inherited all of this from the Apple OS engineer that left the company.
I have logs as well, just need to figure out how to upload them here.

Thank you.

—
Reply to this email directly or view it on GitHub.

[macmule]

See: https://jamfnation.jamfsoftware.com/discussion.html?id=14911

[macmule]

Cannot recreate :(

[mturnerfmr]

Figured. Every issue that I keep running into here is out of the norm.

Appreciate the help!

Have responded to the post.

Matt

From: macmule [mailto:[email protected]]
Sent: Monday, July 20, 2015 5:45 AM
To: macmule/AutoCasperNBI
Cc: Turner, Matthew (FMR CO)
Subject: Re: [AutoCasperNBI] USB Restorable - Certificate Error from JSS (#52)

Cannot recreate :(

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/52#issuecomment-122827763.

[macmule]

Actually, I think this maybe a Casper Imaging issue.

By default, AutoCasperNBI will set Casper Imaging to ignore Invalid certs if a JSS URL is passed to it:

If Casper Imaging is not honouring that, then it's a bug with Casper Imaging.

If a JSS URL is not being entered into AutoCasperNBI then it's still a Casper Imaging but as Casper Imaging will not honour the "allowedInvalidCertificate" key. (FR https://jamfnation.jamfsoftware.com/featureRequest.html?id=3781)

[macmule]

Closing as cannot recreate 😦