Reviewing Mac Health Check Results

Information regarding each check that is ran on WKU-Owned Macs and how to address potential issues it identifies.

Issue/Question

What tests are performed with the Mac Health Check utility and how do I remediate any issues found?

Environment

• WKU-Owned Macs

Resolution

The Mac Health Check utility performs numerous tests to help identify any potential issues:

Operating System and Software Updates (Checks 1-3)

• macOS Version: Ensures your computer is running a supported version of macOS (current and immediately previous versions).
  • Remediation: Please update to a supported macOS version via System Settings > General > Software Update.
• Available Updates: Ensures your computer has the latest security patches to maintain security and performance.
  • Remediation: System Settings > General > Software Update.
• App Auto-Patch: Ensures apps are set to auto-update to maintain their security and performance.
  • Remediation: Please run App Auto-Patch from Self-Service.

System Security (Checks 4-9)

• System Integrity Protection (SIP): Ensures SIP is enabled to protect system files and prevent execution of unauthorized code.
  • Remediation: Please contact ITS.
• Signed System Volume (SSV): Ensures macOS is booted from a signed, cryptographically protected volume.
  • Remediation: Please contact ITS.
• Firewall: Ensures the built-in macOS firewall is enabled to protect your Mac from unauthorized access.
  • Remediation: Please contact ITS.
• FileVault Encryption: Ensures disk encryption is enabled to prevent unauthorized access to your Mac.
  • Remediation: Contact ITS for assistance enabling FileVault.
• Gatekeeper / XProtect: Ensures Apple's malware protection is active to prevent execution of identified malware and adware.
  • Remediation: Please contact ITS.
• Touch ID: Ensures biometric authentication is configured to securely unlock your Mac and authorize apps.
  • Remediation: Add fingerprints in System Settings > Touch ID & Password.

Device Maintenance and Hygiene (Checks 10-14)

• Last Reboot: Checks if the Mac has been restarted recently (at least once a week is recommended).
  • Remediation: Please restart your Mac regularly.
• Free Disk Space: Checks the amount of free disk space available on your Mac's boot volume to ensure it can apply system updates.
  • Remediation: Run Self-Service > Your Scripts > Check My Storage to help identify the 50 largest directories. If you need additional assistance, please contact ITS.
• Desktop Size and Item Count: Checks the size and item count of the Desktop folder.
  • Remediation: Please contact ITS if you need assistance.
• Downloads Size and Item Count: Checks the size and item count of the Downloads folder.
  • Remediation: Please contact ITS if you need assistance.
• Trash Size and Item Count: Checks the size and item count of the Trash.
  • Remediation: Please contact ITS if you need assistance.

Privacy and Sharing Settings (Checks 15-18)

• Password Hint: Ensures no password hint is set for better security.
  • Remediation: Remove password hint in System Settings > Users & Groups.
• AirDrop: Ensures AirDrop is not set to Everyone for security.
  • Remediation: System Settings > General > AirDrop & Handoff > AirDrop > No One / Contacts Only.
• AirPlay Receiver: Ensures AirPlay Receiver is disabled when not needed.
  • Remediation: System Settings > General > AirDrop & Handoff > AirPlay Receiver > Disable.
• Bluetooth Sharing: Ensures Bluetooth Sharing is disabled when not needed.
  • Remediation: System Settings > General > Sharing > Accessories & Internet > Bluetooth Sharing > Disable.

MDM Enrollment and Management (Checks 19-22, 28)

• Mosyle MDM Profile: Verifies the presence of the Mosyle MDM profile to ensure your Mac is properly enrolled.
  • Remediation: Contact ITS.
• Mosyle MDM Certificate Expiration: Validates the expiration date of the Mosyle MDM certificate.
  • Remediation: Contact ITS if the certificate is expired or expiring soon.
• Apple Push Notification Service: Validates communication between Apple, Mosyle, and your Mac.
  • Remediation: Please contact ITS.
• Mosyle Check-In: Ensures your Mac checks in with the Mosyle MDM server multiple times each day.
  • Remediation: Contact ITS.
• Mosyle Self-Service: Verifies access to the Mosyle Self-Service portal.
  • Remediation: Contact ITS.

Apple Services Connectivity (Checks 25-27)

• Apple Push Notification Hosts: Tests connectivity to Apple Push Notification hosts.
  • Remediation: Check network or VPN settings; contact ITS if persistent.
• Apple Device Management: Tests connectivity to Apple device enrollment and MDM services.
  • Remediation: Verify network access; contact ITS if persistent.
• Apple Software and Carrier Updates: Tests connectivity to Apple software update endpoints.
  • Remediation: Ensure Internet access; contact ITS if persistent.
• Apple Certificate Validation: Tests connectivity to Apple certificate and OCSP services.
  • Remediation: Check firewall/VPN settings; contact ITS if persistent.
• Apple Identity and Content Services: Tests connectivity to Apple Identity and Content services.
  • Remediation: Verify network access; contact ITS if persistent.

Performance and Compatibility (Check 29)

• Electron Corner Mask: Detects susceptible Electron apps that may cause GPU slowdowns on macOS 26 Tahoe.
  • Remediation: The specific susceptible apps will be listed. Update or replace affected apps, or contact ITS for guidance.

Network and VPN (Check 30)

• ​​​​​​​Network Quality Test: Performs various networking-related tests of your Mac's Internet connection.
  • Remediation: Not applicable. Informational only.