Manually Creating the Mobile Device Configuration Profile in Jamf Pro

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. In Jamf Pro, click Devices at the top of the page.
  2. Click Configuration Profiles.
  3. Click New.
  4. Use the General payload to configure the basic settings for the profile.
  5. In the Name field, enter the name of the iboss security filter group name.
  6. From the Distribution Method pop-up menu, select "Install Automatically".
  7. Configure the VPN payload and modify the following settings:
    • VPN Type —VPN
    • Connection Type —Custom SSL
    • Provider Type —App Proxy
    • Identifier —Set this to the bundle identifier that corresponds to the iboss cloud Enterprise app.
    • Server —Set this to the DNS hostname of your preferred iboss cloud DNS cluster.
    • Account —Use one of the following variables for the identifier type that will be populated for each device:

      • $USERNAME

      • $DEVICENAME

      • $SERIALNUMBER

  8. Under Custom Data, enter the following keys and values:
    • GatewayPort —Set this to the port used by the iboss cloud proxy.
    • RunTimeMode —standard
    • ProxyAutoConfigurationScriptURL —Set this to the URL for the iboss cloud PAC script.
    • ComputerOverrideUser —If you want auto group categorization to occur with iboss cloud, set this to 0. If you want all group categorization to occur based on the device's configuration policy, set this to 1.
    • WebSecurityKey —Set this to the group security key for the policy's targeted filter group.
    • GatewayHost —Use the hostname of the preferred DNS cluster used for the Server field.
    • CloudRegistrationSSLPort —If the proxy port was provisioned as 8009, set this to 8016. If the proxy port was provisioned as 80, set this to 443.
    • LogLevel —0
    • AutoLoginSecurityGroups —Set this to the group name that is associated with the security key from the WebSecurityKey parameter.
  9. Configure the following settings:
    • User Authentication —Certificate
    • Identity Certificate —None
    • Enable VPN On Demand —Enabled
    • Proxy Setup —None
  10. (Optional) If you plan to use SSL decryption, you must add the iboss cloud SSL decryption certificate to the configuration profile.

    1. Configure the Certificate payload.

    2. Enter a name for the certificate.

    3. From the Select Certificate Option pop-up menu, select "Upload".

    4. Select Upload Certificate.
      Note:

      The file you upload to Jamf Pro must use the .cer file type.

    5. Upload your iboss cloud SSL decryption certificate.

  11. Click the Scope tab and configure the scope of the profile.
  12. Click Save.