There are several ways to sign a configuration profile with a certificate. Two common methods are to either use Apple Configurator or the command line:
- Method 1—Use Apple Configurator
Open the configuration profile in Apple Configurator. You can download Apple Configurator from the Mac App Store.
Navigate to .
When prompted, choose the previously created Jamf Pro certificate that was installed in your Login keychain from the Signing Identity pop-up menu to sign the profile.
If you do not see your certificate, you may need to re-create it and re-import it to your keychain.
Save the configuration profile.
- Method 2—Use the Command Line
Open Terminal and enter a command similar to the following:
/usr/bin/security cms -S -N "<common name of certificate>" -i <input path to unsigned profile> -o <output path for signed profile>For example, if the certificate common name was "JamfSign", the command would be the following:
/usr/bin/security cms -S -N "JamfSign" -i ~/Desktop/Custom.mobileconfig -o ~/Desktop/Custom-signed.mobileconfig