Uploading and Deploying a macOS Activation Profile using Microsoft Intune - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Use the following process to create a UEM configuration profile to push a traffic vectoring profile to your macOS devices from Microsoft Intune.

  1. In Jamf Security Cloud, navigate to Devices > Activation Profiles.
  2. Select the required Activation Profile.
  3. In the Managed Deployment area, select Microsoft Endpoint Management.
  4. Download the UEM configuration file for macOS devices.
  5. (Optional) If you are deploying Zero Trust Network Access, you can enable the Jamf Trust requiredEndpointsAgents key to ensure that the service can only run when your organization's chosen security software is also active on a device. To do this, Jamf recommends deploying an Applications and Custom Settings configuration profile via Jamf Pro.

    For example, if your organization uses Jamf Protect and Microsoft Defender to protect your macOS devices, add com.jamf.trust as the domain preference in the Jamf Pro configuration profile along with the following code:

    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>requiredEndpointAgents</key>
    <array>
      <string>com.jamf.protect.agent</string>
      <string>com.microsoft.wdav</string>
    </array>
  </dict>
</plist>
    Note:
    • Your security software may be an Endpoint Protection Platform (EPP), Endpoint Detection and Response (EDR) service, or antivirus software; for example VMware Carbon Black or Microsoft Defender.

    • If your security software suffers from performance issues, then ZTNA will be disconnected.

    • If the required software isn't running on a device, ZTNA is disabled and the user cannot enable it. Instead, the user encounters a warning message explaining that Jamf Trust is disabled because their security software isn't running.
  6. Log in to Microsoft Intune.
  7. Navigate to Devices > macOS > Configuration Profiles.
  8. Click Create Profile.
  9. In the panel that appears, select Templates under Profile type.
  10. Select Custom, then click Create.
  11. In the Name field, enter a descriptive title for the configuration.

    Ideally the name should match that of the corresponding Activation Profile.

  12. Enter a description with more details for other administrators.
  13. Click Next.
  14. Enter a Configuration Profile Name.
    Note:

    Jamf suggests using the name or code of the Activation Profile.

  15. Click Select a file, then navigate to the configuration profile you downloaded from Jamf Security Cloud.
  16. Assign the configuration profile to groups of users or devices.
    Note:

    Jamf recommends that you start with a group of test devices, then move on to deploy to other devices once you are sure the process is working correctly.

  17. Ensure that the configuration is correct before processing.
  18. Click Create to create and deploy the configuration profile.
  19. Define the Scope Tags as required by your Endpoint Manager RBAC practices.