Lesson 18: Configuration Profiles

Jamf 100 Course
Solution
Application
Content Type
Training Content
Utilities & Services
ft:locale
en-US

Goal

Create and deploy configuration profiles to enrolled computers and mobile devices.

Video

Note:

Installed configuration profiles are now located in General > Device Management within System Settings in macOS.

Key points

  • Configuration profiles are XML files used to enforce various settings on managed devices.

  • Configuration profiles can be created and deployed with Jamf Pro.

  • Configuration profile deployment leverages communication with the Apple Push Notification service (APNs).

  • Configuration profile creation and deployment in Jamf Pro is nearly identical for computers and mobile devices.

    • Some payloads are only available for computers and others are only available for mobile devices.

  • Configuration profile payloads contain settings for security, functionality, or services for MDM-capable devices.

    • The General payload is always required as it contains important information about the configuration profile.

  • Commonly used configuration profile payloads include the Passcode, Restrictions, and Wi-Fi payloads.

    • Passcode: sets passcode requirements

    • Restrictions: restricts access to specific features of the device operating system

    • Wi-Fi: configures saved wireless networks

  • Many payloads support multiple configurations of the same type in configuration profiles.

    • Use the button in the upper-right corner to configure additional payloads of the same type.

    • This allows, for example, the configuration of two Wi-Fi networks using the same configuration profile.

  • Avoid bundling multiple non-related payloads into a single configuration profile.

    • For example, deploy one configuration profile to enforce restrictions and a separate profile for Wi-Fi.

    • This approach reduces complexity when configuring scope and troubleshooting issues.

Review

To view answers, click arrow next to each question.

  1. Which Apple service is used to deploy configuration profiles?
    Configuration profiles are deployed via the Apple Push Notification service (APNs).
  2. Generally, is it better to have many payloads or fewer payloads within a single configuration profile?
    When possible, it is highly recommended to deploy only one payload per profile.
  3. Is it possible to add multiple configurations within the same payload in a configuration profile?
    Yes, many payloads support adding multiple configurations; for example, multiple SSIDs can be deployed within a single Network or Wi-Fi payload.

Practice

  1. Create and deploy a computer configuration profile with a Passcode payload.

    1. In the Distribution Method pop-up menu, select "Install Automatically".

    2. Configure the Passcode payload as follows:

      1. Complex Passcode: Excluded

      2. Alphanumeric Value: Included and Enforced

      3. Minimum passcode length: 8 characters

      4. Maximum passcode age: 60 days

    3. Select the Scope tab, then target a test computer group.

  2. Create a mobile device configuration profile using the Wi-Fi payload with two configurations.

    1. In the Distribution Method pop-up menu, select "Install Automatically".

    2. In the Wi-Fi payload, configure the first Wi-Fi network as follows:

      1. Service Set Identifier (SSID): Acme NYC

      2. Hidden Network: Deselected

      3. Auto Join: Selected

      4. Disable Captive Network Detection: Deselected

      5. Disable MAC Address Randomization: Deselected

      6. Proxy Setup: None

      7. Security Type: WPA / WPA2

      8. Personal Password: acme1234

      9. Verify Password: acme1234

    3. Add a second Wi-Fi network with the following settings:

      1. Service Set Identifier (SSID): Acme Hidden

      2. Hidden Network: Selected

      3. Auto Join: Selected

      4. Disable Captive Network Detection: Deselected

      5. Disable MAC Address Randomization: Deselected

      6. Proxy Setup: None

      7. Security Type: WPA / WPA2

      8. Personal Password: Acme123456!

      9. Verify Password: Acme123456!

    4. Select the Scope tab, then target a building of your choice.

Resources

Jamf Pro Documentation

Apple