Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Roll Your Own Configuration Profiles

Jamf
November 13, 2019
350

Roll Your Own Configuration Profiles

Jamf

November 13, 2019
Tweet

Transcript

  1. © JAMF Software, LLC
    Roll-Your-Own Configuration Profiles

    4:00 - 4:45 PM
    UP NEXT

    View full-size slide

  2. © JAMF Software, LLC
    Matthew Mitchell
    Professional Services Engineer II

    Jamf

    View full-size slide

  3. © JAMF Software, LLC

    View full-size slide

  4. © JAMF Software, LLC
    Goals
    Learn a workflow to create custom Configuration Profiles that
    only enforce the settings we want

    Increased understanding of how Configuration Profiles are
    structured

    Experience signing and un-signing content deployed via Jamf Pro

    View full-size slide

  5. © JAMF Software, LLC
    Workflow Steps
    1. Create

    2. Download

    3. Un-sign

    4. Modify

    5. Sign

    6. Upload

    View full-size slide

  6. © JAMF Software, LLC
    Resources
    jamf.it/jnuc2019-ryo

    View full-size slide

  7. © JAMF Software, LLC
    Why?
    Troubleshoot and mitigate issues

    What you want, when you want

    View full-size slide

  8. © JAMF Software, LLC
    Create

    View full-size slide

  9. © JAMF Software, LLC
    Create

    View full-size slide

  10. © JAMF Software, LLC
    Un-sign

    View full-size slide

  11. © JAMF Software, LLC
    security cms -D -i /path/to/profile.mobileconfig |
    xmllint --format - > /path/to/output.mobileconfig
    Un-sign
    security cms -D -i /path/to/profile.mobileconfig
    xmllint --format - > /path/to/output.mobileconfig

    View full-size slide

  12. © JAMF Software, LLC
    Un-sign

    View full-size slide

  13. © JAMF Software, LLC
    Modify

    View full-size slide

  14. © JAMF Software, LLC
    Modify

    View full-size slide

  15. © JAMF Software, LLC
    Modify

    View full-size slide

  16. © JAMF Software, LLC
    Modify

    View full-size slide

  17. © JAMF Software, LLC
    Modify

    View full-size slide

  18. © JAMF Software, LLC
    Modify

    View full-size slide

  19. © JAMF Software, LLC
    Modify

    View full-size slide

  20. © JAMF Software, LLC
    Sign

    View full-size slide

  21. © JAMF Software, LLC
    openssl req -out ~/Desktop/CSR.csr -new -newkey
    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
    Sign
    openssl req -out ~/Desktop/CSR.csr -new -newkey
    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key

    View full-size slide

  22. © JAMF Software, LLC
    Sign

    View full-size slide

  23. © JAMF Software, LLC
    openssl smime -sign -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key -nodetach
    -outform der -in ~/Desktop/unsigned.mobileconfig
    -out ~/Desktop/signed.mobileconfig
    Sign
    openssl smime -sign -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key -nodetach
    -outform der -in ~/Desktop/unsigned.mobileconfig
    -out ~/Desktop/signed.mobileconfig
    -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key
    -in ~/Desktop/unsigned.mobileconfig

    View full-size slide

  24. © JAMF Software, LLC
    Sign

    View full-size slide

  25. © JAMF Software, LLC
    Upload

    View full-size slide

  26. © JAMF Software, LLC
    Upload

    View full-size slide

  27. © JAMF Software, LLC
    Proof

    View full-size slide

  28. © JAMF Software, LLC
    Lock iPad into Single App Mode

    Enable Voice Control

    Allow Voice Control to be toggled off

    View full-size slide

  29. © JAMF Software, LLC

    View full-size slide

  30. © JAMF Software, LLC

    View full-size slide

  31. © JAMF Software, LLC

    View full-size slide

  32. © JAMF Software, LLC

    View full-size slide

  33. © JAMF Software, LLC

    View full-size slide

  34. © JAMF Software, LLC

    View full-size slide

  35. © JAMF Software, LLC

    View full-size slide

  36. © JAMF Software, LLC
    Goals
    Learn a workflow to create custom Configuration Profiles that
    only enforce the settings we want

    Increased understanding of how Configuration Profiles are
    structured

    Experience signing and un-signing content deployed via Jamf Pro

    View full-size slide

  37. © JAMF Software, LLC
    Resources
    jamf.it/jnuc2019-ryo

    View full-size slide

  38. © JAMF Software, LLC
    Thank you for listening!
    Give us feedback by
    completing the 2-question
    session survey in the JNUC
    2019 app.

    View full-size slide