macOS

This section describes how to configure macOS desktop and laptop devices for online testing.

Testing Device

A feature in the supported versions of macOS, called Assessment Mode (formerly Automatic Assessment Configuration), works with the CAI secure browser to lock down a Mac device for online testing. Users in the field need to do nothing to set up Assessment Mode. Once the secure browser is launched, Assessment Mode starts automatically. For more information about Assessment Mode, including a list of features it disables, refer to Apple’s Set up iPad and Mac to give tests and assessments.

Disabling Fast User Switching

Fast User Switching is a feature in macOS that allows for more than one user to be logged on at the same time. If Fast User Switching is not disabled and students try to access it during a test, the secure browser will pause the test.

To disable Fast User Switching:

  1. Choose the Apple menu ➔ System Settings (figure 1) to open the System Settings screen.

    Apple Menu with the System Settings item indicated

    Figure 1. Apple menu

  2. Select [Control Center] from the left navigation panel in the System Settings screen (indicated in figure 2).

    Control Center section of System Settings interface with Control Center option and Fast User Switching section indicated.

    Figure 2. “Fast User Switching” section in the macOS System Settings Control Center panel

  3. Scroll down the Control Center panel on the right. In the “Fast User Switching” section, verify that the “Show in Menu Bar” option is set to Don’t Show (also indicated in figure 2). Use a toggle arrow to reset it if it is not set to Don’t Show.
  4. Close the System Settings screen.

Disabling the Text-to-Speech Keyboard Shortcut

A feature in the supported versions of the macOS allows users to have any text on the screen read aloud by selecting the text and pressing a preset key or set of keys on the keyboard. By default, this feature is disabled and must remain disabled so as not to compromise test security. These instructions describe how to toggle this feature.

  1. Choose the Apple menu ➔ System Settings (figure 3) to open the System Settings screen.

    Apple Menu with the System Settings item indicated

    Figure 3. Apple menu

  2. Select [Accessibility] from the left navigation panel (indicated in figure 4).

    Accessibility section of System Settings interface with Accessibility option and Spoken Content indicated.

    Figure 4. Spoken Content option in the macOS System Settings Accessibility panel

  3. In the “Spoken Content” section of Accessibility on the right side of the screen, select Spoken Content (also indicated in figure 4).

  4. When the Spoken Content panel opens on the right, confirm that Speak selection and the rest of the settings in that group are toggled left, to the “off” position (figure 5).

    Spoken Content panel in System Settings interface with Speak announcements, Speak selection, Speak item under the pointer, and Speak typing feedback options indicated.

    Figure 5. Spoken Content panel in the macOS System Settings screen

  5. If the settings in the following group are not already disabled, toggle them off by sliding the toggle to the left:
    • Speak announcements
    • Speak selection
    • Speak item under the pointer
    • Speak typing feedback
  6. Close the System Settings screen.

Disabling Third-Party Apps Updates Manually

Updates to third-party apps may include components that compromise the testing environment. This subsection describes how to disable updates to third-party apps.

The following instructions are based on macOS 12.6; similar instructions apply for other supported versions of macOS.

To disable updates to third-party apps:

  1. Log on to the student’s account.

  2. Choose the Apple menu ➔ App Store (figure 6) to open the App Store screen.

    Apple Menu with the App Store item indicated

    Figure 6. Apple menu with the App Store option

  3. If it is checked, uncheck the Automatic Updates box on the Settings screen (indicated in figure 7).

    App Store Settings with the Automatic Updates checkbox indicated.

    Figure 7. App Store Settings screen

  4. Close the Settings and App Store screens.

Setting MacBook Pro Touch Bar to Show Function Keys

MacBook Pro touch bars may allow students to access features on a device that should not be accessible while a student is testing. If students try to access these features while taking a test, the secure browser will pause the test. To prevent students from getting exited from a test if they try to use the touch bar to access unwanted features, configure the touch bar to show only function keys.

  1. Choose the Apple menu ➔ System Settings (figure 8) to open the System Settings screen.

    Apple Menu with the System Settings item indicated

    Figure 8. Apple menu

  2. Select [Keyboard] from the left navigation panel (indicated in figure 9).

    Keyboard section of System Settings interface with Keyboard option and Touch Bar Settings button indicated.

    Figure 9. “Keyboard” section in the macOS System Settings screen

  3. Select the [Touch Bar Settings] button (also indicated in figure 10).

  4. In the Touch Bar shows field, verify that the F1, F2, etc. Keys option. as indicated in figure 10, is set. Use a toggle arrow to reset it if it is not.

    Touch Bar Settings options with the Touch Bar shows setting and Done button indicated.

    Figure 10. Touch Bar shows option

  5. Select [Done] (also indicated in figure 10.)
  6. Close the System Settings screen.

Secure Browser

This subsection provides instructions for installing the secure browser on Mac desktop or laptop computers only; it does not apply to Apple mobile devices such as the iPad.

Installation

Installing on an Individual Device

In this scenario, a user installs the secure browser on Apple desktop and laptop computers. The steps in this procedure may vary depending on the version of macOS and the web browser.

  1. Previously installed versions of the secure browser will be uninstalled automatically during the installation process.
  2. Navigate to the CAASPP and ELPAC Secure Browsers website by visiting Technology Resources and Secure Browsers and then selecting the [Secure Browsers] link.

  3. Select the [macOS] tab and then select the [Download Secure Browser] button (figure 11).

    Download Secure Browser for macOS 12.6+ Monterey, 13.3+ Ventura, & 14.0+ Sonoma button.

    Figure 11. [Download Secure Browser] for macOS button

  4. If prompted for a download location, select the Downloads folder.

  5. Open [Downloads] from the dock, and then select the downloaded.dmg file (such as CASecureBrowser17.0.dmg) to display its contents (figure 12).

    The contents of the CASecureBrowser folder showing the CASecureBrowser icon and the letter-A folder.

    Figure 12. Contents of the CASecureBrowser.dmg folder

  6. Either hold down the [Control] key when opening the downloaded file to bypass the security on an ad hoc basis; or follow these additional steps to temporarily allow installation from any source. Otherwise, proceed to step 7.

    1. Choose the Apple menu ➔ System Settings (figure 13) to open the System Settings screen.

      Apple Menu with the System Settings item indicated

      Figure 13. Apple menu

    2. Select [Privacy & Security] from the left navigation panel (indicated in figure 14).

      System Settings interface with the Privacy & Security button and 'Security' section indicated.

      Figure 14. “Security” section in the macOS System Settings Privacy & Security panel

    3. In the Privacy and Security panel, verify that the App Store and identified developers radio button in the “Security” section is selected (also indicated in figure 14). Select it if it is not.
    4. Close the System Settings screen.

  7. Drag the [CASecureBrowser] icon in the CASecureBrowser.dmg to the folder icon on its right (figure 15). This installs the secure browser into Applications.

    The contents of the CASecureBrowser folder with the CASecureBrowser being dragged to the letter-A folder

    Figure 15. [CASecureBrowser] icon dragged in the CASecureBrowser.dmg folder

  8. Ensure all background jobs, such as virus scans or software updates, are scheduled outside of scheduled testing days or time frames. For example, if testing takes place between 8 a.m. and 3 p.m., schedule background jobs outside of these hours, making sure they are completed by the time testing begins.

  9. In Finder, navigate to Go ➔ Applications, and then double-click [CASecureBrowser] to launch the secure browser (figure 16). (The user must launch the secure browser to complete the installation.)

    CASecureBrowser shortcut

    Figure 16. [CASecureBrowser] shortcut icon for macOS

  10. The secure browser opens displaying the student logon screen. The secure browser fills the entire screen and hides the dock.

  11. To exit the secure browser, select [CLOSE SECURE BROWSER] in the upper-right corner of the screen.
  12. To create a desktop shortcut, from the Applications folder, drag the [CASecureBrowser] icon (figure 16) to the desktop.

Cloning the Installation

Depending on the local networking and permissions, it may be faster to install the secure browser on to a single Mac, take an image of the disk, and then copy the image to other Macs.

To clone the secure browser installation to other Macs:

  1. Take the following steps on the Mac where the user will clone the installation:
    1. Install the secure browser following the directions in the subsection Installing on an Individual Device. Be sure to run and then close the secure browser after the installation.

    2. In Finder, display the Library interface (Go ➔ [Option] + Library) and then open the Application Support folder (figure 17).

      Library interface with the Application Support folder indicated.

      Figure 17. Apple Library interface with the Application Support folder

    3. Delete the CASecureBrowser folder containing the secure browser (figure 18).

      Library interface with the Application Support folder indicated.

      Figure 18. Apple Application Support configuration interface

  2. Create a shell script that creates a new secure browser profile when a user logs on. The basic command to create a profile is <install_directory>/Contents/MacOS/‌CASecureBrowser‑‑CreateProfile profile_name, where profile_name is unique among all testing computers.
  3. Clone the image.
  4. Deploy the image to the target Macs.

Modifying Desktop Shortcuts

  1. In Finder, navigate to Applications ➔ Utilities and open Terminal.

  2. Change to the desktop directory.

    Cd ~/Desktop

  3. Create a file securebrowser.command on the desktop using a text editor such as pico.

    Pico securebrowser.command.

  4. Copy or type the following lines:

    #!/bin/sh

    /Applications/CASecureBrowser.app/Contents/MacOS/./ CASecureBrowser ‑proxy 1:http:fake-url.com:8080 & aHR0cHM6Ly9jYS50ZHMuY2FtYml1bWFzdC5jb20vc3R1ZGVudA==

  5. Be sure to specify the complete path to the secure browser and the desired proxy option. Ensure the command ends with an ampersand (&). Save the file and exit the editor by pressing [Ctrl] + [O], [Enter], and then [Ctrl] + [X].

  6. Apply execute permission to the file. In Terminal, type

    chmod a+x securebrowser.command

  7. Close Terminal.
  8. Select the securebrowser.command icon on the desktop. The secure browser opens with the configured proxy setting.

Resetting Profiles

A user who has been advised by an LEA Success Agent to reset the secure browser profile should take the following steps:

  1. Log on as the admin user or the user who installed the secure browser and close any open secure browsers.
  2. Start the Finder.

  3. In Finder, display the Library interface (Go ➔ [Option] + Library) and then open the Caches folder (figure 19).

    Library interface with the Caches folder indicated.

    Figure 19. Apple Library interface with the Caches folder

  4. Delete the folder containing the secure browser (figure 20).

    Caches interface with the CASecureBrowser 16.0 folder indicated.

    Figure 20. Apple Caches interface

  5. Restart the secure browser.

Uninstallation

To uninstall a macOS secure browser, drag its folder to the Trash.