macOS

This topic describes how to configure macOS desktop and laptop devices for online testing.

Testing Device

A feature in the supported versions of macOS, called Assessment Mode (formerly Automatic Assessment Configuration), works with the CAI secure browser to lock down a Mac device for online testing. Users in the field need to do nothing to set up Assessment Mode. Once the secure browser is launched, Assessment Mode starts automatically. For more information about Assessment Mode, including a list of features it disables, refer to Apple’s Set up iPad and Mac to give tests and assessments web page.

Disabling Fast User Switching

Fast User Switching is a feature in macOS that allows for more than one user to be logged on at the same time. If Fast User Switching is not disabled and students try to access it during a test, the secure browser will pause the test.

To disable Fast User Switching:

1. Choose the Apple menu ➔ System Settings (figure 1) to open the System Settings screen.

   

   Figure 1. Apple menu

2. Select [Control Center] from the left navigation panel in the System Settings screen (indicated in figure 2).

   

   Figure 2. “Fast User Switching” section in the macOS System Settings Control Center panel

3. Scroll down the Control Center panel on the right. In the “Fast User Switching” section, verify that the “Show in Menu Bar” option is set to Don’t Show (also indicated in figure 2). Use a toggle arrow to reset it if it is not set to Don’t Show.
4. Close the System Settings screen.

Disabling the Text-to-Speech Keyboard Shortcut

A feature in the supported versions of the macOS allows users to have any text on the screen read aloud by selecting the text and pressing a preset key or set of keys on the keyboard. By default, this feature is disabled and must remain disabled so as not to compromise test security. These instructions describe how to toggle this feature.

1. Choose the Apple menu ➔ System Settings (figure 3) to open the System Settings screen.

   

   Figure 3. Apple menu

2. Select [Accessibility] from the left navigation panel (indicated in figure 4).

   

   Figure 4. Spoken Content option in the macOS System Settings Accessibility panel

3. In the “Spoken Content” section of Accessibility on the right side of the screen, select Spoken Content (also indicated in figure 4).

4. When the Spoken Content panel opens on the right, confirm that Speak selection and the rest of the settings in that group are toggled left, to the “off” position (figure 5).

   

   Figure 5. Spoken Content panel in the macOS System Settings screen

5. If the settings in the following group are not already disabled, toggle them off by sliding the toggle to the left:
   • Speak announcements
   • Speak selection
   • Speak item under the pointer
   • Speak typing feedback
6. Close the System Settings screen.

Disabling Third-Party Apps Updates Manually

Updates to third-party apps may include components that compromise the testing environment. This subtopic describes how to disable updates to third-party apps.

The following instructions are based on macOS 11.6; similar instructions apply for other supported versions of macOS.

To disable updates to third-party apps:

1. Log on to the student’s account.

2. Choose the Apple menu ➔ App Store (figure 6) to open the App Store screen.

   

   Figure 6. Apple menu with the App Store option

3. Select the Settings item from the App Store menu (figure 7).

   

   Figure 7. App Store menu bar options

4. If it is checked, uncheck the Automatic Updates box on the Settings screen (indicated in figure 8).

   

   Figure 8. App Store Settings screen

5. Close the Settings and App Store screens.

Setting MacBook Pro Touch Bar to Show Function Keys

MacBook Pro touch bars may allow students to access features on a device that should not be accessible while a student is testing. If students try to access these features while taking a test, the secure browser will pause the test. To prevent students from getting exited from a test if they try to use the touch bar to access unwanted features, configure the touch bar to show only function keys.

1. Choose the Apple menu ➔ System Settings (figure 9) to open the System Settings screen.

   

   Figure 9. Apple menu

2. Select [Keyboard] from the left navigation panel (indicated in figure 10).

   

   Figure 10. “Keyboard” section in the macOS System Settings screen

3. Select the [Touch Bar Settings] button (also indicated in figure 10).

4. In the Touch Bar shows field, verify that the F1, F2, etc. Keys option, as indicated in figure 11, is set. Use a toggle arrow to reset it if it is not.

   

   Figure 11. Touch Bar shows option

5. Select [Done] (also indicated in figure 11).
6. Close the System Settings screen.

Secure Browser

This topic provides instructions for installing the secure browser on Mac desktop or laptop computers only; it does not apply to Apple mobile devices such as the iPad.

Installation

Installing on an Individual Device

In this scenario, a user installs the secure browser on Apple desktop and laptop computers. The steps in this procedure may vary depending on the version of macOS and the web browser.

1. Previously installed versions of the secure browser will be uninstalled automatically during the installation process.
2. Navigate to the CAASPP and ELPAC Secure Browsers website by visiting either the CAASPP Technology Resources web page or the ELPAC Technology Resources web page and then selecting the [Secure Browsers] link at either location.

3. Select the [macOS] tab and then select the appropriate [Download Secure Browser] button (figure 12).

   

   Figure 12. [Download Secure Browser] buttons

4. If prompted for a download location, select the Downloads folder. Otherwise, the file goes into the Downloads folder by default.

5. Open [Downloads] from the dock, and then select the downloaded.dmg file (such as CASecureBrowser16.0.dmg) to display its contents (figure 13).

   

   Figure 13. Contents of the CASecureBrowser.dmg folder

6. Either hold down the [Control] key when opening the downloaded file to bypass the security on an ad hoc basis; or follow these additional steps to temporarily allow installation from any source. Otherwise, proceed to step 7.

   1. Choose the Apple menu ➔ System Settings (figure 14) to open the System Settings screen.

      

      Figure 14. Apple menu

   2. Select [Privacy & Security] from the left navigation panel (indicated in figure 15).

      

      Figure 15. “Security” section in the macOS System Settings Privacy & Security panel

   3. In the Privacy and Security panel, verify that the App Store and identified developers radio button in the “Security” section is selected (also indicated in figure 15). Select it if it is not.
   4. Close the System Settings screen.

7. Drag the [CASecureBrowser] icon in the CASecureBrowser.dmg to the folder icon on its right (figure 16). This installs the secure browser into Applications.

   

   Figure 16. [CASecureBrowser] icon dragged in the CASecureBrowser.dmg folder

8. Ensure all background jobs, such as virus scans or software updates, are scheduled outside of scheduled testing days or time frames. For example, if testing takes place between 8 a.m. and 3 p.m., schedule background jobs outside of these hours, making sure they are completed by the time testing begins.

9. In Finder, navigate to Go ➔ Applications, and then double-click [CASecureBrowser] to launch the secure browser (figure 17). (The user must launch the secure browser to complete the installation.)

   

   Figure 17. [CASecureBrowser] shortcut icon for macOS

10. Select [Open] when prompted that the application had been downloaded from the internet (figure 18).

    

    Figure 18. Internet download message box

11. The secure browser opens displaying the student logon screen. The secure browser fills the entire screen and hides the dock.

12. To exit the secure browser, select [CLOSE SECURE BROWSER] in the upper-right corner of the screen.
13. To create a desktop shortcut, from the Applications folder, drag the [CASecureBrowser] icon (figure 17) to the desktop.

Cloning the Installation

Depending on the local networking and permissions, it may be faster to install the secure browser on to a single Mac, take an image of the disk, and then copy the image to other Macs.

To clone the secure browser installation to other Macs:

1. Take the following steps on the Mac where the user will clone the installation:
   1. Install the secure browser following the directions in the subtopic Installing on an Individual Device. Be sure to run and then close the secure browser after the installation.

   2. In Finder, display the Library interface (Go ➔ [Option] + Library) and then open the Application Support folder (figure 19).

      

      Figure 19. Apple Library interface with the Application Support folder

   3. Delete the CASecureBrowser folder containing the secure browser (figure 20).

   

   Figure 20. Apple Application Support configuration interface

2. Create a shell script that creates a new secure browser profile when a user logs on. The basic command to create a profile is <install_directory>/Contents/MacOS/‌CASecureBrowser‑‑CreateProfile profile_name, where profile_name is unique among all testing computers.
3. Clone the image.
4. Deploy the image to the target Macs.

Modifying Desktop Shortcuts

1. In Finder, navigate to Applications ➔ Utilities and open Terminal.

2. Change to the desktop directory.

   Cd ~/Desktop

3. Create a file securebrowser.command on the desktop using a text editor such as pico.

   Pico securebrowser.command.

4. Copy or type the following lines:

   #!/bin/sh

   /Applications/CASecureBrowser.app/Contents/MacOS/./ CASecureBrowser ‑proxy 1:http:fake-url.com:8080 & aHR0cHM6Ly9jYS50ZHMuY2FtYml1bWFzdC5jb20vc3R1ZGVudA==

5. Be sure to specify the complete path to the secure browser and the desired proxy option. Ensure the command ends with an ampersand (&). Save the file and exit the editor by pressing [Ctrl] + [O], [Enter], and then [Ctrl] + [X].

6. Apply execute permission to the file. In Terminal, type

   chmod a+x securebrowser.command

7. Close Terminal.
8. Select the securebrowser.command icon on the desktop. The secure browser opens with the configured proxy setting.

Resetting Profiles

A user who has been advised by an LEA Success Agent to reset the secure browser profile should take the following steps:

1. Log on as the admin user or the user who installed the secure browser and close any open secure browsers.
2. Start the Finder.

3. In Finder, display the Library interface (Go ➔ [Option] + Library) and then open the Caches folder (figure 21).

   

   Figure 21. Apple Library interface with the Caches folder

4. Delete the folder containing the secure browser (figure 22).

   

   Figure 22. Apple Caches interface

5. Restart the secure browser.

Uninstallation

To uninstall a macOS secure browser, drag its folder to the Trash.