Tribruin

euge said:

This is the reason I use both Keychain and 1Password. I consider 1Password as my system of record, though, and Keychain as a copy only for convenience. Though with the new password API coming in iOS 12, I'm hoping I can clear out my Keychain and just use 1Password.

And if you're wondering why I don't just use Keychain only, it's because I use 1Password for more than just passwords, and like I said I consider 1Password as my system of record. Data management is leagues better in 1Password for me. When I create or change a password on my Mac, I let Keychain save the password when it asks. That's about the extent of the effort I put in for Keychain.

I used to use Keychain and 1Password the same way, but I have since turned Keychain off. On my Mac (which accounts for 90% of my password entries) it is so easy to type cmd-\ to autofill the password from 1P (If you have multiple entered for the same website, you can pick which one to use.) On my iPad, it is a little harder, but I have 1P docked and just drag it up to right and have it float over Safari as I drag the username and password to Safari. The hardest is my iPhone (since it doesn't support split windows). There I have to switch back and forth between the 1P app and Safari. The good thing is (a) 1P has a feature that will automatically fill the password as soon as you switch back to the App after copying the user name and (2) most of my iPhone use is App based anyway and I am typically able turn on FaceID and not need to worry about password. 

boxcatcher said:

This story is bizarre.

Why would Apple deploy a third-party password vault app? To support employees who want to use Chrome...? 

Even acquiring the company would only serve to support use-cases outside the Apple ecosystem (e.g., enable an Apple user to pull down an iCloud Keychain password on their Windows machine at work), which is 180-degrees out of phase with Apple's historical practices.

Take a look at 1Password for Business. It is much more than a simple password manager. It allows companies to create different vaults and manage password (and other data) and control what the users have access to. For example, an accounting department might need a set of passwords for various excel spreadsheets. If multiple people need access to these files, how do you control the password? Send an email to everyone? What happens when one person leaves the department and the passwords need to be changed? How do you notify all the current users of the new password? What about when a new person starts? Just email them the password. 

With 1Password for Business, a company could create a new Vault called Accounting. You assign permissions to individual users (or even a user Group). Any one with access to that vault can access the passwords at any time. If someone new is added, just added them to the permitted list. Someone leaves, remove them from the access list (and, if needed, update the passwords on the files and in the vault.)

I pay for and use 1Password for Families. My wife, dad, son, and I all have our own accounts. I have several vaults, each with their own permissions. I have a personal vault (for all my personal data), I have a "Financial" vault with passwords for our Financial websites, (only myself and wife have access to it), and I have a "Video" vault with has our Netflix, HBOGo, etc. accounts (everyone has access to it.) There is no way to do this in Keychain. 

macxpress said:

Is Apple going to make it so when you do an Internet restore it gives you a choice of what version of macOS you want to install rather than only installing what version came with the Mac? To my knowledge, this would be the new way to image once were all on APFS and after High Sierra. You restore the Mac with Internet restore, and then let the MDM do the rest with installing apps, and configuring the Mac the way you want it. If this is the case, I don't want to restore a Mac purchased today 2yrs from now and have it restore macOS High Sierra...I would like the option to choose what version of macOS to install. Otherwise, its restore High Sierra, then configure the MDM to run the upgrade, then install the apps, configure the Mac, etc. In my opinion, thats 15 steps backwards and makes imaging something like a lab or even a bunch of 1 to 1 Macs that much more time consuming. I can have an image created in Deploy Studio and push that to my Macs in about 10 minutes, then about another 10-20 minutes to let it configure and install some apps. 

It already exists. If you boot to the Recovery drive (CMD+R) , you get the same version as currently installed. CMD+OPT+R will install the latest version (that is compatible with your Mac). If you want the original version that came installed when you purchased the Mac, use CMD+SHIFT+OPT+R. See this link on Apple https://support.apple.com/en-us/HT204904

Also, starting with 10.13.4, there is an --eraseinstall option that can be used to erase your hard drive and reinstall the O/S without booting to any recovery mode. 

rob53 said:

This doesn't surprise me especially since Apple is pushing for more use of iCloud services making the deprecated server services redundant. This is especially true in educational and government installations.

On the brighter side, putting (more?) resources into creating a better low-cost MDM service might be the hidden gem in this announcement. Server software is $20 without any client license fees making it a huge bargain compared to MDM systems like jamf and Blackberry's offering. Grab a Mac mini and it might be enough to manage a large number of Apple devices. Of course, having MDM on your main server that does everything else would be preferable but in this case it might be more cost effective to run it on a small, dedicated server.

Anyone want to compare Apple Server's MDM to jamf and others?

I hope you are kidding. There is no comparison between Profile Manager and JAMF (or AirWatch, MasS360, MobileIron, or any of a hundred others.)  

Profile Manager is strictly for Apple devices and Apple users. It is missing so many Enterprise features, including Active Directory and Exchange Integration, Device tracking and location services (for corporate devices), Dashboards and reporting, and  Advanced group support (Smart Groups). 

Even Apple System Engineers will tell you that Profile Manager is strictly a "Proof of Concept" MDM that Apple uses to introduce new MDM features. This of PM like a reference design.