Roll Your Own Configuration Profiles

Transcript

1. © JAMF Software, LLC
   Roll-Your-Own Configuration Profiles
   
   4:00 - 4:45 PM
   UP NEXT
   

   View Slide

2. View Slide

3. © JAMF Software, LLC
   Matthew Mitchell
   Professional Services Engineer II
   
   Jamf
   

   View Slide

4. © JAMF Software, LLC
   

   View Slide

5. © JAMF Software, LLC
   Goals
   Learn a workflow to create custom Configuration Profiles that
   only enforce the settings we want
   
   Increased understanding of how Configuration Profiles are
   structured
   
   Experience signing and un-signing content deployed via Jamf Pro
   

   View Slide

6. © JAMF Software, LLC
   Workflow Steps
   1. Create
   
   2. Download
   
   3. Un-sign
   
   4. Modify
   
   5. Sign
   
   6. Upload
   

   View Slide

7. © JAMF Software, LLC
   Resources
   jamf.it/jnuc2019-ryo
   

   View Slide

8. © JAMF Software, LLC
   Why?
   Troubleshoot and mitigate issues
   
   What you want, when you want
   

   View Slide

9. © JAMF Software, LLC
   Create
   

   View Slide

10. © JAMF Software, LLC
    Create
    

    View Slide

11. © JAMF Software, LLC
    Un-sign
    

    View Slide

12. © JAMF Software, LLC
    security cms -D -i /path/to/profile.mobileconfig |
    xmllint --format - > /path/to/output.mobileconfig
    Un-sign
    security cms -D -i /path/to/profile.mobileconfig
    xmllint --format - > /path/to/output.mobileconfig
    

    View Slide

13. © JAMF Software, LLC
    Un-sign
    

    View Slide

14. © JAMF Software, LLC
    Modify
    

    View Slide

15. © JAMF Software, LLC
    Modify
    

    View Slide

16. © JAMF Software, LLC
    Modify
    

    View Slide

17. © JAMF Software, LLC
    Modify
    

    View Slide

18. © JAMF Software, LLC
    Modify
    

    View Slide

19. © JAMF Software, LLC
    Modify
    

    View Slide

20. © JAMF Software, LLC
    Modify
    

    View Slide

21. © JAMF Software, LLC
    Sign
    

    View Slide

22. © JAMF Software, LLC
    openssl req -out ~/Desktop/CSR.csr -new -newkey
    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
    Sign
    openssl req -out ~/Desktop/CSR.csr -new -newkey
    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
    

    View Slide

23. © JAMF Software, LLC
    Sign
    

    View Slide

24. © JAMF Software, LLC
    openssl smime -sign -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key -nodetach
    -outform der -in ~/Desktop/unsigned.mobileconfig
    -out ~/Desktop/signed.mobileconfig
    Sign
    openssl smime -sign -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key -nodetach
    -outform der -in ~/Desktop/unsigned.mobileconfig
    -out ~/Desktop/signed.mobileconfig
    -signer ~/Desktop/cert.pem
    -inkey ~/Desktop/privateKey.key
    -in ~/Desktop/unsigned.mobileconfig
    

    View Slide

25. © JAMF Software, LLC
    Sign
    

    View Slide

26. © JAMF Software, LLC
    Upload
    

    View Slide

27. © JAMF Software, LLC
    Upload
    

    View Slide

28. © JAMF Software, LLC
    Proof
    

    View Slide

29. © JAMF Software, LLC
    Lock iPad into Single App Mode
    
    Enable Voice Control
    
    Allow Voice Control to be toggled off
    

    View Slide

30. © JAMF Software, LLC
    

    View Slide

31. © JAMF Software, LLC
    

    View Slide

32. © JAMF Software, LLC
    

    View Slide

33. © JAMF Software, LLC
    

    View Slide

34. © JAMF Software, LLC
    

    View Slide

35. © JAMF Software, LLC
    

    View Slide

36. © JAMF Software, LLC
    

    View Slide

37. © JAMF Software, LLC
    Goals
    Learn a workflow to create custom Configuration Profiles that
    only enforce the settings we want
    
    Increased understanding of how Configuration Profiles are
    structured
    
    Experience signing and un-signing content deployed via Jamf Pro
    
    

    View Slide

38. © JAMF Software, LLC
    Resources
    jamf.it/jnuc2019-ryo
    

    View Slide

39. © JAMF Software, LLC
    Thank you for listening!
    Give us feedback by
    completing the 2-question
    session survey in the JNUC
    2019 app.
    

    View Slide