Sophos SafeGuard: Custom Info Items for Absolute Manage

Whenever we implement new software, I try to include some tracking that can be used in Absolute Manage. Recently we’ve been working to get our Macs encrypted using Sophos SafeGuard full disk encryption. To make some reporting that is easy for our guys to use, I created two simple custom info items.
The first custom info item is for tracking the current encryption status of the Mac. This will list three different states of the drive including Not Installed, Encrypting, and Encrypted. This status will update in Absolute Manage every time inventory is taken of the machine, or you can force it by gathering inventory.

#!/bin/sh

#Check to see if SafeGuard is installed
if [ -f "/usr/bin/sgadmin" ]; then
/usr/bin/sgadmin --status | grep -A 3 "Volume info" | grep "| 0" | awk -F '|' '{print $5}'
else
echo "Not installed"
fi
exit 0

The second custom info item will show the last time the computer checked into the Enterprise console with it’s encryption status. We do our own tracking of the Macs using this field in Absolute Manage, but management does it’s tracking of both PCs and Macs in a separate central console.

#!/bin/sh

#Check to see if SafeGuard is installed
if [ -f "/usr/bin/sgadmin" ]; then
/usr/bin/sgadmin --status | grep "Last contact" | awk '{print $4, $5, $6, $7, $8}'
else
	echo "Not installed"
fi
exit 0

Learning Puppet – Starting out with the basics

Downloaded the Learning Puppet VM today, and have started going thru the lessons. Until today I’ve only used pico for editing text in the command line, but figured I should be like Mike and finally learn how to use vim. Took me a bit to figure out that I needed to hit “i” to insert text, and esc to finish inserting text. Then exiting and saving was a quick youtube video watch away (:wq was the answer).

Tumblr mgscqkEuW31qzohe7o1 1280

Simple VIM commands you wish you’d known earlier