English

macOS High Sierra Support Resources

Centrify DirectControl Agent for Mac - early access build for macOS 10.13 High Sierra

Important Note:

The 10.13 High Sierra release of macOS is quickly approaching. A new version of the Centrify DirectControl Agent for Mac will need to be installed prior to upgrading to High Sierra. Failure to update the Centrify DirectControl Agent for Mac prior to upgrading macOS to the High Sierra release will result in login failures for network accounts. Please ensure you are using 10.13 beta 5 or later only. Administrators will need to login via a local account on the Mac and update the Centrify DirectControl Agent to version 5.4.2 to restore network account login support. Please also note that if you attempt to login to a network account on 10.13 prior to installing the appropriate Centrify DirectControl Agent, your login session will likely hang. You should be able to power down the system by holding the power button and then reboot and login with a local admin account.

What is it?

Centrify is pleased to continue its tradition of offering customers day one support for the latest macOS operating system. An updated version of Centrify DirectControl Agent for Mac is in the works to be available in time for the macOS 10.13 High Sierra launch. In order to assist administrators with testing prior to the High Sierra launch, Centrify is providing an early access beta for registered Centrify customers.

This release is provided as an early access release, and it is intended for the sole purpose of testing Centrify with Apple’s upcoming macOS 10.13 (High Sierra) release. This unsupported early access release is provided “as-is” and it is not intended for use in production environments. This build should be used with macOS 10.13 beta 5 and later.

Who needs this?

  • Admins who are performing early testing on macOS 10.13 High Sierra

For a complete list of OS changes administrators should prepare for prior to installation of macOS High Sierra (including deprecated changes to home folder sync and VPN PPTP profiles), please refer to Apple Support.

System Requirements:

Updating to High Sierra:

  • Install the latest version of Centrify DirectControl Agent for Mac (5.4.2 available below) before updating to macOS High Sierra. Please be aware the current supported Centrify DirectControl Agent for Mac 5.4.1 will not install on High Sierra. This is expected behavior. If you have already updated to High Sierra, you can install version 5.4.2 or later.

Fresh install of High Sierra:

  • Only the Centrify DirectControl Agent for Mac 5.4.2 (available below) and later will install on High Sierra.

Not ready to upgrade to High Sierra?

KB-5765: How to block OS X updates via Group Policy provides information on how to leverage Centrify Group Policies to block the macOS 10.13 High Sierra preview update.

Known Issues:

Below is a list of known issues accompanying this early access release and the High Sierra 10.13 beta 5 release:

  • CC-49146 – Login fails when Java 6 is installed
    • Details: If Java 6 is present on a 10.13 instance and the system is joined to AD with Centrify authentication to both network and local accounts may fail.
    • Status: Under investigation.
    • Resolution: Upgrade to Java 7 or later.
  • CC-47982 – Cloud joined Macs do not provide location updates
    • Details: Location updates are not being reported to the Centrify Identity Services platform for enrolled macOS 10.13 systems
    • Status: Under investigation.
  • CC- 48440 – No Touch ID for mobile accounts
    • Details: With 10.13 mobile accounts no longer have a Touch ID entry in system preferences and Touch ID is not active. This happens with native Apple AD accounts as well.
    • Status: Under investigation. Submitted issue to Apple: Apple bug # 33496344
  • CC-48932 – Network accounts with Admin rights cannot unlock System Preferences
    • Details: Network accounts that are not mobile accounts that have been designated as admin accounts cannot unlock System Preferences. This is true with native AD bind and Centrify AD bound Macs.
    • Status: Under investigation. Submitted issue to Apple: Apple bug # 33812183
    • Resolution: Ensure network admin accounts are Mobile accounts.
  • CC-49305 – “Enable login items” Group Policy does not work
    • Details: On macOS 10.13 systems the Centrify group policy to launch scripts or applications upon login does not work.
    • Status: Under investigation.
  • CC-48439 – Lock screen on smart card removal does not work
    • Details: On macOS 10.13 systems the Centrify group policy to force screen lock upon smart card removal does not work
    • Status: Under investigation.

Download Links:

 

Note: This release is intended for testing purposes only, and is not intended for installation on production systems.

The final release will not upgrade install over this pre-release version. Administrators will be required to perform a clean install by uninstalling any pre-release build versions prior to installing the final release.

How to report feedback or issues:

This Centrify early access build is provided for testing purposes only, and is not intended for use in production environments. Please report any issues or questions to Centrify Technical Support via our website at https://www.centrify.com/support