This document describes the step to prepare a Mac mini to run as the Kobiton workstation, i.e. hosting deviceConnect or deviceShare.
Check macOS version compatibility
If the macOS version is below 11.4, please follow these steps to upgrade to a newer version.
- Open System Preferences and navigate to Software Update, then wait for the system to check new software versions
- Choose Update now in the macOS Update section
Create Kobiton-standard Mac user
Visit the macOS User Guide, follow the section Add account to create an account with the below requirements:
- Select Administrator for user type
- The account name is deviceconnect
- Set strong password for the account.
- Select Allow user to administer this computer.
Disable Energy Saver
The Energy Saver feature on MacOS puts the machine into sleep mode after a period of inactivity. Perform the following to prevent the workstation from sleeping:
- Launch System Preference and navigate to Energy Saver.
- Make sure that Put hard disks to sleep when possible is unchecked.
- Navigate to Lock Screen and make sure that Turn display off when inactive is set to Never:
Set the time zone
- In System Preferences, search for and open Date & Time.
- Let the system automatically select a time zone or set a time zone manually.
Disable macOS update
Automatic OS updates can interrupt the device usage and need to be disabled. macOS updates can be done manually at a scheduled time.
- In System Preferences, search for and open Software Update.
- Select the information icon and make sure all checkboxes are unchecked.
- Select Done to save the changes.
Grant full disk access to terminal app
- Launch System Preferences and select Security & Privacy.
- Select Full Disk Access on the left sidebar.
- If required, click the lock button at the bottom to allow changes.
- Select + to add a new app.
- Choose the Terminal app under Applications > Utilities > Terminal and select Open.
Enable remote control
It is not required to enable remote control and file sharing for the Mac mini except for some features. However, it is highly recommended to turn these on for remote support purposes. Refer to the below table to learn more details:
|
Setting
|
Required? |
Description |
|---|---|---|
|
File Sharing |
Not required, but recommended |
Remote access to files in the Mac mini, such as retrieving logs or copying software for installation. |
|
Remote Login |
For specific features |
Allows remote access via Secure Shell (SSH). Required for Lightning mode, Passcode and Network Payload Capture. |
|
Remote Management |
Not required, but recommended |
Allows screen sharing for installing, configuring and troubleshooting software remotely. |
See below for instructions to enable these settings:
- Launch System Preferences app, search for and select Sharing.
- Turn on the below items if your organization’s security policy allows them:
- File Sharing
- Remote Login
- If Remote Login is turned on, click the information icon, then select the All users radio option and check Allow full disk access for remote users in the pop-up. Click Done to save the changes.
-
- Remote management
- If Remote Management is turned on, click the information icon, then select All users radio option in the pop-up. Click Done to save the changes.
- Remote management
Disable Siri
Refer to this link and disable the Ask Siri features.
Allow Kobiton software in Firewall
If possible, refer to this link and turn off Firewall protection.
If your organization requires Firewall to be enabled in the Mac mini, follow the steps in this link to allow incoming connection to the following through the Firewall:
- /usr/local/deviceconnect/Services/ (directory): all executable files in this folder and subfolders.
- /usr/local/deviceconnect/devicekey/deviceKeyServer
- /usr/local/deviceconnect/Build/Mono/dc-adb
- /usr/bin/caffeinate
- /usr/local/bin/nginx
- /usr/local/kobiton/deviceshare/deviceshare
Allow Kobiton software in Antivirus or Antimalware
McAfee, Sophos, or CylanceENDPOINT are examples of antivirus or antimalware apps that may be installed on the Mac mini. They may block deviceConnect’s executables and block it from functioning normally. So, we recommend uninstalling this type of software from the Mac mini to avoid issues with Kobiton software.
If antivirus or antimalware is absolutely required, add the top-level executables below to the allow list (e.g. always allow to execute with a full grant from OS) of the antivirus software:
- /usr/local/deviceconnect/Services/ (directory): *.dll and executable files i.e. the execute bit is 1 for owner, group and other
- /usr/local/deviceconnect/devicekey/deviceKeyServer
- /usr/local/deviceconnect/Build/Mono/dc-adb
- /usr/bin/caffeinate
- /usr/local/bin/nginx
- /usr/local/kobiton/deviceshare/deviceshare
Reboot the Mac mini after making the changes, so that the Kobiton software can execute.
Note: even with the above changes, some antivirus software may still impact the Kobiton software.
Prioritize Ethernet connection over Wifi
We recommend using an Ethernet connection; keep Wifi as a backup.
- Open System Preferences and navigate to Network.
- Click the 3-dot dropdown in the bottom right, and select Set Service Order....
- In the list of networking options, select and drag Ethernet to the top and Wi-Fi to the second place. Click OK to save the changes.