Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Roll Your Own Configuration Profiles

Jamf
November 13, 2019
380

Roll Your Own Configuration Profiles

Jamf

November 13, 2019
Tweet

Transcript

  1. © JAMF Software, LLC Goals Learn a workflow to create

    custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
  2. © JAMF Software, LLC Workflow Steps 1. Create 2. Download

    3. Un-sign 4. Modify 5. Sign 6. Upload
  3. © JAMF Software, LLC security cms -D -i /path/to/profile.mobileconfig |

    xmllint --format - > /path/to/output.mobileconfig Un-sign security cms -D -i /path/to/profile.mobileconfig xmllint --format - > /path/to/output.mobileconfig
  4. © JAMF Software, LLC openssl req -out ~/Desktop/CSR.csr -new -newkey

    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key Sign openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
  5. © JAMF Software, LLC openssl smime -sign -signer ~/Desktop/cert.pem -inkey

    ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig Sign openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -in ~/Desktop/unsigned.mobileconfig
  6. © JAMF Software, LLC Lock iPad into Single App Mode

    Enable Voice Control Allow Voice Control to be toggled off
  7. © JAMF Software, LLC Goals Learn a workflow to create

    custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
  8. © JAMF Software, LLC Thank you for listening! Give us

    feedback by completing the 2-question session survey in the JNUC 2019 app.