Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Roll Your Own Configuration Profiles

9d350fa2294e1192f8f12b0ebf1a1d8b?s=47 Jamf
November 13, 2019
73

Roll Your Own Configuration Profiles

9d350fa2294e1192f8f12b0ebf1a1d8b?s=128

Jamf

November 13, 2019
Tweet

Transcript

  1. © JAMF Software, LLC Roll-Your-Own Configuration Profiles 4:00 - 4:45

    PM UP NEXT
  2. None
  3. © JAMF Software, LLC Matthew Mitchell Professional Services Engineer II

    Jamf
  4. © JAMF Software, LLC

  5. © JAMF Software, LLC Goals Learn a workflow to create

    custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
  6. © JAMF Software, LLC Workflow Steps 1. Create 2. Download

    3. Un-sign 4. Modify 5. Sign 6. Upload
  7. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

  8. © JAMF Software, LLC Why? Troubleshoot and mitigate issues What

    you want, when you want
  9. © JAMF Software, LLC Create

  10. © JAMF Software, LLC Create

  11. © JAMF Software, LLC Un-sign

  12. © JAMF Software, LLC security cms -D -i /path/to/profile.mobileconfig |

    xmllint --format - > /path/to/output.mobileconfig Un-sign security cms -D -i /path/to/profile.mobileconfig xmllint --format - > /path/to/output.mobileconfig
  13. © JAMF Software, LLC Un-sign

  14. © JAMF Software, LLC Modify

  15. © JAMF Software, LLC Modify

  16. © JAMF Software, LLC Modify

  17. © JAMF Software, LLC Modify

  18. © JAMF Software, LLC Modify

  19. © JAMF Software, LLC Modify

  20. © JAMF Software, LLC Modify

  21. © JAMF Software, LLC Sign

  22. © JAMF Software, LLC openssl req -out ~/Desktop/CSR.csr -new -newkey

    rsa:2048 -nodes -keyout ~/Desktop/privateKey.key Sign openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key
  23. © JAMF Software, LLC Sign

  24. © JAMF Software, LLC openssl smime -sign -signer ~/Desktop/cert.pem -inkey

    ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig Sign openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -in ~/Desktop/unsigned.mobileconfig
  25. © JAMF Software, LLC Sign

  26. © JAMF Software, LLC Upload

  27. © JAMF Software, LLC Upload

  28. © JAMF Software, LLC Proof

  29. © JAMF Software, LLC Lock iPad into Single App Mode

    Enable Voice Control Allow Voice Control to be toggled off
  30. © JAMF Software, LLC

  31. © JAMF Software, LLC

  32. © JAMF Software, LLC

  33. © JAMF Software, LLC

  34. © JAMF Software, LLC

  35. © JAMF Software, LLC

  36. © JAMF Software, LLC

  37. © JAMF Software, LLC Goals Learn a workflow to create

    custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro
  38. © JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

  39. © JAMF Software, LLC Thank you for listening! Give us

    feedback by completing the 2-question session survey in the JNUC 2019 app.