Creating the App in Other UEM Solutions - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Use the following process to configure the command used to deploy Jamf Trust with your UEM solution.

  1. Log in to Jamf Security Cloud and navigate to Devices > Activation profiles.
  2. Select the required activation profile.

    The activation profile must have the Ask user to submit name and email setting enabled to display the user's name and email on the relevant device records.

  3. Click Generic UEM for Windows, and then the Windows app configuration section.
  4. Click Preview.
  5. Locate the key values in the displayed code.
    Note:

    These key values must be kept secure. Rather than copying them into a file for use later, Jamf recommends that you keep Jamf Security Cloud open and then copy these values over into the command described below only when you are ready to do so. Saving these values in a note or similar file is not good security practice.

  6. Log into your UEM solution, and begin the process of creating the app.
  7. Configure the deployment command so that it includes the shareable link, the key values, and a UEM parameter value of "Other", as follows:
    msiexec /i "{filename.msi}" SHAREABLE_LINK=https://e.wandera.com/{code} UEM=Other API_KEY="{api_key}" SECRET_KEY="{secret_key}" NO_PII=true /quiet /qn /norestart
    Note:The NO_PII value is set as true by default in Jamf Safe Internet, but is set as false by default in Jamf Security Cloud.
    {filename.msi}
    The name of your Jamf Trust package replaces this string. For example, "jamftrust.winclient.8.2.0.119.signed.msi".
    {code}
    The enrollment link replaces this string. For example, "https://e.wandera.com/abc123".
    {api_key}
    The API key located under Windows on Microsoft Intune in Jamf Security Cloud's Activation profiles replaces this string.
    {secret_key}
    The secret key located under Windows on Microsoft Intune in Jamf Security Cloud's Activation profiles replaces this string.
    {no_pii}
    This setting eliminates the standard level of Personally Identifiable Information (PII) from Jamf Trust when set to true. The setting is not required when using Jamf Security Cloud, but is set to true by default when using Jamf Safe Internet.
    Note:

    This command includes an SSL certificate that ensures an HTTPS block page is displayed when a user attempts to access blocked content. If you do not want to install this certificate, add INSTALL_ROOT_CERTIFICATE=false after SECRET_KEY={secret_key} to the end of the parameter list. Additionally, add DESKTOP_SHORTCUT=yes to add Jamf Trust for Windows to the desktop.

  8. Deploy the app to your managed devices.
    Note:

    If you have any difficulties that cannot be resolved by consulting the UEM solution documentation, contact your Jamf Support for assistance.