Reviewing Mac Health Check Results

Information regarding each check that is ran on WKU-Owned Macs and how to address potential issues it identifies.

Issue/Question

What tests are performed with the Mac Health Check utility and how do I remediate any issues found?

Environment

• WKU-Owned Macs

Resolution

The Mac Health Check utility performs numerous tests to help identify any potential issues:

Operating System and Software Updates (Checks 1-3)

• macOS Version: Ensures your computer is running a supported version of macOS (current and immediately previous versions).
  • Remediation: Please update to a supported macOS version via System Settings > General > Software Update.
• Available Updates: Ensures your computer has the latest security patches to maintain security and performance.
  • Remediation: System Settings > General > Software Update.
• App Auto-Patch: Ensures apps are set to auto-update to maintain their security and performance.
  • Remediation: Please run App Auto-Patch from Self-Service.

System Security (Checks 4-10)

• System Integrity Protection (SIP): Ensures SIP is enabled to protect system files and prevent execution of unauthorized code.
  • Remediation: Please contact ITS.
• Signed System Volume (SSV): Ensures macOS is booted from a signed, cryptographically protected volume.
  • Remediation: Please contact ITS.
• Firewall: Ensures the built-in macOS firewall is enabled to protect your Mac from unauthorized access.
  • Remediation: Please contact ITS.
• FileVault Encryption: Ensures disk encryption is enabled to prevent unauthorized access to your Mac.
  • Remediation: Contact ITS for assistance enabling FileVault.
• Gatekeeper / XProtect: Ensures Apple's malware protection is active to prevent execution of identified malware and adware.
  • Remediation: Please contact ITS.
• Touch ID: Ensures biometric authentication is configured to securely unlock your Mac and authorize apps.
  • Remediation: Add fingerprints in System Settings > Touch ID & Password.
• VPN Client: Checks whether Cisco Secure Client is installed and connected. VPN is optional for most WKU users, so this check shows as a warning rather than a failure if it isn't installed or isn't currently connected.
  • Remediation: Install Cisco Secure Client from Self-Service if you need VPN access. If you don't need VPN, no action is required.

Device Maintenance and Hygiene (Checks 11-15)

• Last Reboot: Checks if the Mac has been restarted recently (at least once a week is recommended).
  • Remediation: Please restart your Mac regularly.
• Free Disk Space: Checks the amount of free disk space available on your Mac's boot volume to ensure it can apply system updates.
  • Remediation: Run Self-Service > Your Scripts > Check My Storage to help identify the 50 largest directories. If you need additional assistance, please contact ITS.
• Desktop Size and Item Count: Checks the size and item count of the Desktop folder.
  • Remediation: Please contact ITS if you need assistance.
• Downloads Size and Item Count: Checks the size and item count of the Downloads folder.
  • Remediation: Please contact ITS if you need assistance.
• Trash Size and Item Count: Checks the size and item count of the Trash.
  • Remediation: Please contact ITS if you need assistance.

Privacy and Sharing Settings (Checks 16-19)

• Password Hint: Ensures no password hint is set for better security.
  • Remediation: Remove password hint in System Settings > Users & Groups.
• AirDrop: Ensures AirDrop is not set to Everyone for security.
  • Remediation: System Settings > General > AirDrop & Handoff > AirDrop > No One / Contacts Only.
• AirPlay Receiver: Ensures AirPlay Receiver is disabled when not needed.
  • Remediation: System Settings > General > AirDrop & Handoff > AirPlay Receiver > Disable.
• Bluetooth Sharing: Ensures Bluetooth Sharing is disabled when not needed.
  • Remediation: System Settings > General > Sharing > Accessories & Internet > Bluetooth Sharing > Disable.

MDM Enrollment and Management (Checks 20-23, 29)

• Mosyle MDM Profile: Verifies the presence of the Mosyle MDM profile to ensure your Mac is properly enrolled.
  • Remediation: Contact ITS.
• Mosyle MDM Certificate Expiration: Validates the expiration date of the Mosyle MDM certificate.
  • Remediation: Contact ITS if the certificate is expired or expiring soon.
• Apple Push Notification Service: Validates communication between Apple, Mosyle, and your Mac.
  • Remediation: Please contact ITS.
• Mosyle Check-In: Ensures your Mac checks in with the Mosyle MDM server multiple times each day.
  • Remediation: Contact ITS.
• Mosyle Self-Service: Verifies access to the Mosyle Self-Service portal.
  • Remediation: Contact ITS.

Apple Services Connectivity (Checks 24-28)

• Apple Push Notification Hosts: Tests connectivity to Apple Push Notification hosts.
  • Remediation: Check network or VPN settings; contact ITS if persistent.
• Apple Device Management: Tests connectivity to Apple device enrollment and MDM services.
  • Remediation: Verify network access; contact ITS if persistent.
• Apple Software and Carrier Updates: Tests connectivity to Apple software update endpoints.
  • Remediation: Ensure Internet access; contact ITS if persistent.
• Apple Certificate Validation: Tests connectivity to Apple certificate and OCSP services.
  • Remediation: Check firewall/VPN settings; contact ITS if persistent.
• Apple Identity and Content Services: Tests connectivity to Apple Identity and Content services.
  • Remediation: Verify network access; contact ITS if persistent.

Software Management (Check 30)

• Homebrew Status: If Homebrew is installed, checks whether it and its packages are up to date. Not applicable if Homebrew isn't installed on your Mac.
  • Remediation: Open Terminal, run brew update && brew upgrade for formulae, then brew upgrade --cask for casks.

Performance and Compatibility (Check 31)

• Electron Corner Mask: Detects susceptible Electron apps that may cause GPU slowdowns on macOS 26 Tahoe.
  • Remediation: The specific susceptible apps will be listed. Update or replace affected apps, or contact ITS for guidance.

Network and VPN (Checks 32-33)

• Wi-Fi Signal: Measures Wi-Fi signal strength when connected via Wi-Fi. Not applicable if your Mac is using a wired Ethernet connection.
  • Remediation: Move closer to a Wi-Fi access point, or use a wired connection if possible. Contact ITS if signal remains poor in a location that should have good coverage.
• Network Quality Test: Performs various networking-related tests of your Mac's Internet connection.
  • Remediation: Not applicable. Informational only.