Roll Your Own Configuration Profiles

Transcript

1. © JAMF Software, LLC Roll-Your-Own Configuration Profiles 4:00 - 4:45 PM UP NEXT
3. © JAMF Software, LLC Matthew Mitchell Professional Services Engineer II Jamf
4. © JAMF Software, LLC
5. © JAMF Software, LLC Goals Learn a workflow to create custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
6. © JAMF Software, LLC Workflow Steps 1. Create 2. Download 3. Un-sign 4. Modify 5. Sign 6. Upload
7. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo
8. © JAMF Software, LLC Why? Troubleshoot and mitigate issues What you want, when you want
9. © JAMF Software, LLC Create
10. © JAMF Software, LLC Create
11. © JAMF Software, LLC Un-sign
12. © JAMF Software, LLC security cms -D -i /path/to/profile.mobileconfig | xmllint --format - > /path/to/output.mobileconfig Un-sign security cms -D -i /path/to/profile.mobileconfig xmllint --format - > /path/to/output.mobileconfig
13. © JAMF Software, LLC Un-sign
14. © JAMF Software, LLC Modify
15. © JAMF Software, LLC Modify
16. © JAMF Software, LLC Modify
17. © JAMF Software, LLC Modify
18. © JAMF Software, LLC Modify
19. © JAMF Software, LLC Modify
20. © JAMF Software, LLC Modify
21. © JAMF Software, LLC Sign
22. © JAMF Software, LLC openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key Sign openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
23. © JAMF Software, LLC Sign
24. © JAMF Software, LLC openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig Sign openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -in ~/Desktop/unsigned.mobileconfig
25. © JAMF Software, LLC Sign
26. © JAMF Software, LLC Upload
27. © JAMF Software, LLC Upload
28. © JAMF Software, LLC Proof
29. © JAMF Software, LLC Lock iPad into Single App Mode Enable Voice Control Allow Voice Control to be toggled off
30. © JAMF Software, LLC
31. © JAMF Software, LLC
32. © JAMF Software, LLC
33. © JAMF Software, LLC
34. © JAMF Software, LLC
35. © JAMF Software, LLC
36. © JAMF Software, LLC
37. © JAMF Software, LLC Goals Learn a workflow to create custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
38. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo
39. © JAMF Software, LLC Thank you for listening! Give us feedback by completing the 2-question session survey in the JNUC 2019 app.