Release Overview

Release Overview

This release introduces a series of improvements and fixes aimed at enhancing stability, reliability, and overall user experience. Key updates include resolving issues with boolean value handling, refining internal data storage, enabling automatic version updates, simplifying computer renaming workflows, and addressing a temporary admin bug. Together, these changes provide a smoother and more consistent operation across the application.

🚀 Release Highlights

This update marks a huge leap forward for our platform!

• New Native Swift Engine: We’ve rebuilt the entire tool from the ground up in native Swift, delivering faster performance, smoother interactions, and improved stability across the board.

• Secure Credential Encryption: Your credentials are now protected with enhanced encryption that meets modern security standards — keeping sensitive data safe both in transit and at rest.

• Improved Tools Across the Board: Every tool listed in the wiki has been refined, optimized, and polished for better usability and consistency. Expect smoother workflows and fewer hiccups.

• Database-Powered Data Sharing: The system now uses a dedicated database for storage and communication between tools — enabling smarter data reuse, faster syncs, and a more connected experience overall.

Release Notes

Edit User Profile

1. The configuration field has been removed from the screen.

2. The user has a new argument called --requiredFields to enter the list of required fields.

3. The user has a new argument called --disabledFields to enter the list of fields that will not appear in the UI.

4. Two new arguments have been added: --phone and --email.

5. The fields: allowComputerName, allowAssetTag, and selection have been removed.

6. Options to enter in the requiredFields and disabledFields fields: username, fullname, email, room, position, building, department, computername, assettag.

Break Glass Admin

1. The default --ExtAttr argument has changed from RCC: Breakglass Admin Password - Commander to BreakGlass Admin Password.

Get Backdoor Admin Password From Keychain

1. The default --ExtAttr argument has changed from RCC: Breakglass Admin Password - Commander to BreakGlass Admin Password

Release Notes

Rename Computer

• Introduced word-based token substitution using the :wX:Y syntax, allowing extraction of specific characters from individual words within variables. For example:

  • %=LOCALFULLNAME:w1:1% → first letter of the first word
  • %=LOCALFULLNAME:w2:4% → first four letters of the second word
    This enables more flexible, client-specific naming conventions (e.g., mixing initials and substrings to get something like cscha-abcd1234).

Edit User Profile

• Default behavior when arguments are omitted:

  • Title (--title omitted):

    Happy %=WEEKDAY%, %=LOCALUSERNAME%!\nWelcome to your new %=MODEL%
    

  • Description (--description omitted):

    Please enter the **required** (\*) information for your %=MODEL%, select your preferred **Configuration** then click **Continue** to start applying settings to your new Mac.\n\nIf you need assistance, please contact the **%=SUPPORTTEAM%**.
    

    Now customizable via the new --supportTeamName argument.

• The following user-input fields are now available (in addition to Building and Department):

  • User Name
  • Full Name
  • E-Mail
  • Computer Name
  • Asset Tag
  • Room
  • Position
  • Configuration
  • Building
  • Department

• Refreshed the dialog UI to improve layout and styling, and added support for embedding a company logo.

Update User Info

• New offline mode: if Jamf API credentials are omitted, the tool defaults to local data and runs:

  jamf recon -endUsername $LOCALUSERNAME -realname $LOCALFULLNAME

  allowing organizations without directory integration to populate user details in Jamf Pro.

• Added --server none flag to explicitly skip directory lookups.

Temporary Admin

• Improved the log upload behavior by changing the uploadLog parameter to simply use the already existing Upload Jamf Logs tool:

  • Uses the same mechanism to send logs (e.g., to Google Cloud Storage).
  • Requires prior configuration of the UploadLog tool (bucketName, uploadClientSecret, filePaths, uploadName).
  • Fails gracefully if UploadLog isn’t configured.

Release Notes

Documentation

• Added tip to execute rocketman -v as part of your package deployment policy immediately after installing RCC to force its initial unpacking, ensuring that every later run executes instantly.
• Fixed broken links.

Overall RCC

• Separate binaries now available for x86 and arm64 architectures.
• Official support extends back to macOS 13.7.4.
• A universal binary is in the works to simplify deployment across all platforms.

Rapid Response

• Fixed a bug that prevented jamf commands from properly executing.

Rename Computer

• Implemented a new feature that integrates Jamf field data directly into the RenameComputer tool. Key updates include:
  • Direct Jamf Field Integration: Pull data like asset tags, serial numbers, and hardware models directly from Jamf.
  • Flexible Field Mapping: Use custom aliases for clear, descriptive variable names.
• Introduced a robust multi-tiered approach for obtaining data used in renaming:
  • Local First: The tool initially gathers information from the local computer.
  • Managed Preferences: Then it pulls from the managed preferences plist.
  • Jamf Inventory: Any remaining data is then sourced from Jamf Inventory (General, Location, and Hardware) based on user-specified mappings.
• The Computer Rename tool now allows direct substitution of any configuration variable in naming tokens using the new syntax (e.g., %=MYVARIABLE%). This change simplifies the naming scheme by replacing the previous dependency on predefined local variables and extra configuration profiles.
• Added wildcard matching for token values.
• For more details, visit the tool’s wiki page: https://github.com/Rocketman-Tech/rcc/wiki/Rename-Computer/

App Setup Helper

• Fixed a bug where we could no longer observe the permission state in order to show the user their progress in giving screen recording permission for each app

List All FileVault Enabled Users

• Simplified what we output in the <result> tag.

Secure Token Sharing

• Now attempts keychain password retrieval first, reducing unnecessary client credential prompts when using LAPS.

Release Notes

Temporary Admin

• Terminal access is now blocked by default during temporary admin sessions—no more sneaky command-line access.
• Updated the Wiki to recommend a configuration profile that locks key System Preferences panels during these sessions. The profile is scoped to the Temporary Admin static group so restrictions automatically apply when users are added and lift when they're removed.
• Fixed an issue where Temporary Admin would sometimes fail because the provided reason was falsely flagged as invalid.
• Improved LaunchDaemon handling to ensure it’s properly unloaded when the temporary admin period ends.

Upload Jamf Logs

• Jamf Pro is no longer an upload destination.
• Uploads options are now GCP, AWS (default), or SharePoint.

Break Glass Admin

• Fixed an issue where API credentials were required even when using --storage local.
• Fixed an issue where password resets failed due to the account being locked; the tool now detects and clears lockouts automatically.

Misc.

• swiftDialog is now bundled with Rocketman Command Center—no need to deploy it separately. (Existing swiftDialog installations on your devices won’t interfere with RCC.)
• Added a new flag, --dialogArgs, to any tool using swiftDialog. Pass extra arguments or override defaults to customize the dialog box as you see fit. (See in Wiki)
• Expanded the -h CLI help menu.

NEW Tool! Rapid Response

• Rapid Response now kicks a script into action seconds after a managed plist is detected, bypassing Jamf’s usual check-in schedule for near-instant remediation. Check it out