How to migrate your Mac

This user guide is intended for those of you who need to migrate your computer from any of the currently available systems to the new Mac management environment.

MacBook, coffee cup, note and smartphone on a desk.
Photo: Unsplash

Why do we change systems?

Our aim is to offer a solution that is entirely cloud-based, with more functions, tools and applications to choose from. A solution which would also enable the IT office to manage installations and/or troubleshooting of computers remotely.

Once the migration has been completed, you will be able to sign in either with your first name and last name (firstname.lastname) or with your KI-email address (firstname.lastname@ki.se). If you would like the installation guide as a compiled pdf file, please contact IT support at KI

Migration - step by step

Before the migration you need to secure your locally saved content and files. Make sure that the content is also saved to OneDrive, OwnCloud, on an external hard drive or similar.

  1. Make sure your computer meets the system requirements.
  2. Update your computer's operating system, if necessary.
  3. Migrate your computer with Self Service.
  4. Allow the new system to manage your computer.
  5. Convert your user to a local user.
  6. Allow the system the right to collect a new recovery key for your encrypted disk.
  7. Activate two-step verification via the Microsoft Authenticator app. 

Step 1 and 2: Make sure your computer meets the system requirements and update, if necessary

Illustration showing an overview on this computer

The minimum system requirement for the new management system and login procedure is macOS 10.15.0, or later.

You can easily check which version of macOS your computer is currently running by opening “About This Mac” in the Apple menu in the upper left corner.

If the version is lower than 10.15.0 or 10.15.0.x

If the version is lower than 10.15.0, the computer needs to be upgraded before the migration process can be launched.

If your computer has the macOS version 10.15.0x, move on to Step 3: Migrate your Mac with Self Service

Upgrade your computer - if the version is lower than 10.15.0

If your computer needs to be upgraded, open Self Service and select “MacOS” in the menu.
Click on Catalina 10.15.7 Install.

NB! Some applications may not run with Catalina. Contact Self Service for help if you are uncertain.

Step 3: Migrate your Mac with Self Service

  1. Save all open documents as logout and login may occur during the migration.
  2. Launch Self Service and select “ReEnroller” under the “Migration” tab.
  3. The computer will now unregister from your current management solution and re-register to the new one. This implies you will lose the network connection and be re-connected to KI Guest net until you reach the next step.
    If you are not on Campus or within reach of the KI Guest network, everything should work just fine as long you have an internet connection.
  4. Quit Self Service.
Illustration showing how to approve a configuration profile in order to complete the installation.
Approve a configuration profile (MDM Profile).

Step 4: Allow the new system to manage your computer

In order for the installation to be completed, you need to approve a configuration profile. To do so, go to “System Settings” in the Apple menu in the upper left corner and click on “Profiles” to the lower right.

Select the "MDM Profile" profile and click the "Approve ..." button.

In the dialogue box that opens, confirm by clicking "Approve" once again. The small warning triangle on the profile will then disappear. 

You can now close the System Settings.

Illustration showing - Self Service and how to install Jamf Connect.
Install Jamf Connect.

Step 5: Convert your user to a local user

Save all open documents as logout and login may occur during the migration.

Open Self Service, go to the tab "Migration" and choose to install "Jamf Connect".

Illustration showing application "Mobile to Local" runs automatically.
"Mobile to Local" will start automatically.

Once the installation has been completed, the application "Mobile to Local" will automatically start.

Your KI-ID will most likely already be filled in, and you will only need to provide your password.

Illustration showing the message "completing account migration" and that the process may take a few minutes
Completing account migration. The process may take a few minutes.

Click “Migrate” to launch the process of migrating your account from a mobile to a local account.

Sign in to Microsoft with your KI-email address to confirm that this is the correct account.

In the next step you will have to sign in to Microsoft with your KI-email address to confirm that this is the correct account and that the right permissions are set.

Enter your email address and password in these windows and click "Next". Enter your password and if requested, verify with your authenticator app.

If you need to change or select a wireless network to be able to access the internet, click on the blue symbol in the upper right corner and a list of accessible networks will appear.


In most cases, this does not need to be done/changed.

You will now be able to confirm the login again by entering your password in the next window.

Photo: ITA

In the new window that opens, you need to select your home directory by clicking on "Connect" under your KI-ID.

Finally, you will need to confirm your password again so that your local home directory can be opened and migrated.

The transition of your user account is now complete, and you can continue to work as usual. 

Illustration asking you to create a new recovery key for your encrypted disk.
Create a new recovery key for your encrypted disk.

Step 6: Create a new recovery key for your encrypted disk

The recovery key is not imported to the new system during this migration process. This means you must create a new one.

The system will automatically notify that a new key is required and will launch an application to enable the installation of a new recovery key.

Illustration asking you to enter the password you use to log in to your computer
Enter your password (the one you use to log in to your computer).

When the “Encryption Key Escrow” window appears, click "Next" and enter the password you are using to you log in to the computer.

Illustration showing that FileVault key has been updated.
Migrate your Mac - FileVault key has been updated. Photo: ITA

Once this is done, a notification will appear showing the result.

Illustration asking you to create a new recovery key for your encrypted disk.

If anything goes wrong, a window will open asking you to contact IT support and to give them the information specified in the window. 

If you fail to do so, we cannot guarantee that we can help you if there is ever a problem with unlocking your computer.

Step 7. Activate two-step verification via the Microsoft Authenticator app

Two-step verification means that you log in, in two steps:

  • With your email and password
  • with a code or authentication via an app in your phone.

Two-step verification will be mandatory for all employees during the spring of 2021.

Register your computer with azure ad - step by step

If you are having any problems with the migration please contact Helpdesk: IT support at KI

 

You can choose to visit us by booking a time via Time Center (Note: You have to backup your files and upgrade to MacOS 10.15.x Catalina before your visit)

Visit Timecenter to book a time slot.