Skip to main content

SDR for macOS User Guide

School of Medicine Affiliates: Select "Yes" to the high-risk data question when running Stanford Device Registration (SDR).

Requirements

  • A network connection.
  • The current version of macOS or two versions behind the current one.
    Note: The policy for minimum software versions at Stanford is N-2, the current version plus the two most recently supported versions available. For more information, go to sunset.stanford.edu.

Install SDR on your Mac

Download SDR

Get started

  1. Download and run the installer.

  1. Select Yes to continue.
    Install homepage with a yes and no button.
  2. Authenticate with your SUNet ID and password. Approve the Duo two-step when prompted.
    Stanford login page to enter SUNet ID and password.

  3. For the following windows, click Next to move forward.

    Known issues: The affiliation row can get crowded based on the user's information.

    Start of device registration, enrollment, and encryption. Text on window is "There are the steps that need to be completed in order to safeguard your device: Registration, Enrollment, and Encryption. First, let's make sure the info we pulled from your SUNet IF is correct." Back and Next buttons.
    Window requests user verify their affiliation is listed correctly in a table below. Back and Next buttons.
    Safeguarding your devices on the Stanford Network window. Text says "How you answer the next set of questions will help determine whether you need to encrypt your devices on the Stanford network with our endpoint management system." Back and Next botton.
    How do we safeguard your devices window. Window lists how Stanford can safeguard your device, such as resetting lost or stolen devices, and viewing encryption status. Back and Next button.
    The types of data you use affects how we safeguard your device window. Text "Understanding what type of data you use helps us keep that data safe." Back and Next button.
    What is high-risk data window. Lists different examples of high risk data such as social security numbers and credit card numbers. Back and Next button.

  4. Choose "no" or "yes" and click Next.
    Reminder: School of Medicine affiliates should select "Yes." 
    Device security and privacy window. Text "On this device, do you work with, or could you receive any high-risk data? (This excludes information about you and your family.) Option to select No or Yes. Back and Next buttons.
    Your device information will load.
    Window loading.
     
  5. Check the box and click Next.
    Device information window. Lists SUNet ID, operating system, make/model. A check box to confirm if all information is accurate. Back and Next button.

  6. For the following questions, choose the answer that best matches your use case and click Next.

    Is this device share by any peers or colleagues window. Option to select Yes or No. Back and Next buttons.
    Are you the primary user? Select Yes or Now. Back and Next buttons.
    Is this a Stanford-owned device window. Option to select No, Yes, or Unsure. Back and Next buttons.

     

  7. The following question determines your device’s eligibility for Stanford network access. If you answer “Yes,” choose your on-campus work location.
    Will you be using this device on a Stanford campus window. Option to select Yes or No.
    Will you be using this device on a Stanford campus window. Yes is selected, so a location selection dropdown menu appears.
    Will you be using this device on a Stanford campus window. User is selecting Cardinal Hall as their location on the dropdown menu.

     
  8. If the information appears accurate, click Next. Otherwise, click the pencil icon to edit your response and the SU Group selections.
    Primary user window. This window has a table with the users affiliation, department, whether or not they will store high risk data, and their SU group. User must review table to make sure information is accurate and a pencil icon indicates those requirements have set to be selected.. Back and Next buttons.
    Edit SU Group Pop up. Ask users if they want to select their SU Group or Subgroup.
    Dropdown menu that allows user to select their SU Group.
    Your device information gets registered.
    Edit pop up. This asks the user to verify if they do or do not have access to high risk data.
  9. Review the encryption guide, then check the box to continue.
    Encryption Guide window. The guide lists frequently asked questions regarding the encryption process (for example How long will it take?) User has a checkbox to select they understand the risk and wish to continue. Back or Next button.
  10. Review the policy agreement and click Agree to continue.
    Policy agreement window. Users is asked to review the policy below and then select agree or disagree.
  11. Click Next to begin running updates, configurations, and software installs. Be sure your computer is plugged into a power source and connected to the internet.
    SDR will now begin running updates and patches for the device and asks user to plug device to a power source and connect to internet.
  12. Software and configurations will be installed. Expect this process to take two to three minutes. 
    Loading configuration files window.
    Note: A macOS alert window will pop up during the loading process. This requires your local account password to move forward. 
    SDR password prompt. User must enter their password to move forward, then select okay..
    Installing BigFix Client window.
    Bigfix installed successfully window.
    Jamf installation successful window.
    Enabling encryption with Jamf for device window.
    Checking for Available updates window.
    System updates complete window.
  13. Automations have been completed. Click Continue.
    Automations completed window. Select continue.
  14. Review your compliance requirements and click Next.
    Stanford Compliance requirements window. Encryption, Compliance Agent, and Device Enrollment are are checked. Option to run checks again, go back, or next.
  15. That's all. Click Done to close the program.
    You have completed Device Encryption window. Users should restart computer. Note: It may take another 24-48 hours for updates to appear in MyDevices. Back or Done button.
Last modified