Uploading and Deploying a macOS Activation Profile using Jamf School - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Use the following process to create a UEM configuration profile to push a traffic vectoring profile to your macOS devices from Jamf School.

  1. In Jamf Security Cloud, navigate to Devices > Activation Profiles.
  2. Select the required Activation Profile.
  3. In the Managed Deployment area, select Jamf School.
  4. Download the UEM configuration file for macOS devices.
  5. (Optional) If you are deploying Zero Trust Network Access, you can enable the Jamf Trust requiredEndpointsAgents key to ensure that the service can only run when your organization's chosen security software is also active on a device. To do this, Jamf recommends deploying an Applications and Custom Settings configuration profile via Jamf Pro.

    For example, if your organization uses Jamf Protect and Microsoft Defender to protect your macOS devices, add com.jamf.trust as the domain preference in the Jamf Pro configuration profile along with the following code:

    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>requiredEndpointAgents</key>
    <array>
      <string>com.jamf.protect.agent</string>
      <string>com.microsoft.wdav</string>
    </array>
  </dict>
</plist>
    Note:
    • Your security software may be an Endpoint Protection Platform (EPP), Endpoint Detection and Response (EDR) service, or antivirus software; for example VMware Carbon Black or Microsoft Defender.

    • If your security software suffers from performance issues, then ZTNA will be disconnected.

    • If the required software isn't running on a device, ZTNA is disabled and the user cannot enable it. Instead, the user encounters a warning message explaining that Jamf Trust is disabled because their security software isn't running.
  6. Log in to Jamf School.
  7. Select Profiles in the sidebar.
  8. Click + Create Profile.
  9. Select Upload Custom Profile.
  10. Upload the UEM configuration file.
  11. Enter a Profile name then click Save.
  12. Leave the Use time filter box unchecked to deploy the profile in the shortest time possible.
  13. Click Finish.
  14. Configure the scope of the profile by clicking the + icon and adding device groups.
    Note: Ensure that the owners of the target devices have email addresses assigned. Otherwise, the deployment will not proceed correctly.
  15. Ensure that profile is set to Automatic installation for all groups.
  16. Click Save.