Setup guide

3. Basic Installation and Configuration

Although secure configuration of an existing Mac OS X Server installation is

possible, securely configuring a fresh installation is much simpler. This may not

always be practical, but it is the recommended way to configure Mac OS X Server. If

this guide is being used to configure a previously installed server, the Installation

section of this chapter, which discusses installing a new machine from CD, will not

apply for the most part. The administrator should still read this section, however,

and modify the previous installation to make it match the recommended installation

as much as possible. This may entail deleting installed packages, disabling services,

changing an administrative account name, installing updates, and fixing disk

permissions. This guide does not provide instructions on making these types of

modifications to a previously installed system. Also, administrators should be aware

that applying these recommendations to an existing system might cause the system

to operate incorrectly.

The section addressing updating the operating system and installing security patches

to the system should be performed on all servers.

The section of this chapter on additional configuration of a Mac OS X server should

be applicable to all OS X servers. Caution should still be used if performing this

configuration on an existing system, as making these types of changes to an

operational system could cause conflicts with the current configuration.

Systems should remain isolated from the

operational network until they are

completely and securely configured

whenever possible; use of an isolated

test network is recommended for

installation and configuration.

3.1 Before Installation

If the Open Firmware password was previously enabled, it should be disabled before

beginning installation. To do this:

1. Hold down -option-O-F while restarting the system to enter Open

Firmware mode.

2. Enter the Open Firmware password when prompted.

3. At the Open Firmware prompt (“>”) enter:

reset-nvram

reset-all

UNCLASSIFIED