Roll Your Own Configuration Profiles

Transcript

1. © JAMF Software, LLC Roll-Your-Own Configuration Profiles 4:00 - 4:45

   PM UP NEXT
2. None

3. © JAMF Software, LLC Matthew Mitchell Professional Services Engineer II

   Jamf

4. © JAMF Software, LLC

5. © JAMF Software, LLC Goals Learn a workflow to create

   custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro

6. © JAMF Software, LLC Workflow Steps 1. Create 2. Download

   3. Un-sign 4. Modify 5. Sign 6. Upload

7. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

8. © JAMF Software, LLC Why? Troubleshoot and mitigate issues What

   you want, when you want

9. © JAMF Software, LLC Create

10. © JAMF Software, LLC Create

11. © JAMF Software, LLC Un-sign

12. © JAMF Software, LLC security cms -D -i /path/to/profile.mobileconfig |

    xmllint --format - > /path/to/output.mobileconfig Un-sign security cms -D -i /path/to/profile.mobileconfig xmllint --format - > /path/to/output.mobileconfig

13. © JAMF Software, LLC Un-sign

14. © JAMF Software, LLC Modify

15. © JAMF Software, LLC Modify

16. © JAMF Software, LLC Modify

17. © JAMF Software, LLC Modify

18. © JAMF Software, LLC Modify

19. © JAMF Software, LLC Modify

20. © JAMF Software, LLC Modify

21. © JAMF Software, LLC Sign

22. © JAMF Software, LLC openssl req -out ~/Desktop/CSR.csr -new -newkey

    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key Sign openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key

23. © JAMF Software, LLC Sign

24. © JAMF Software, LLC openssl smime -sign -signer ~/Desktop/cert.pem -inkey

    ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig Sign openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -in ~/Desktop/unsigned.mobileconfig

25. © JAMF Software, LLC Sign

26. © JAMF Software, LLC Upload

27. © JAMF Software, LLC Upload

28. © JAMF Software, LLC Proof

29. © JAMF Software, LLC Lock iPad into Single App Mode

    Enable Voice Control Allow Voice Control to be toggled off

30. © JAMF Software, LLC

31. © JAMF Software, LLC

32. © JAMF Software, LLC

33. © JAMF Software, LLC

34. © JAMF Software, LLC

35. © JAMF Software, LLC

36. © JAMF Software, LLC

37. © JAMF Software, LLC Goals Learn a workflow to create

    custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro

38. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

39. © JAMF Software, LLC Thank you for listening! Give us

    feedback by completing the 2-question session survey in the JNUC 2019 app.