Tweet
Tweet

Slide 1

Slide 1 text

© JAMF Software, LLC Roll-Your-Own Configuration Profiles 4:00 - 4:45 PM UP NEXT

Slide 2

Slide 2 text

No content

Slide 3

Slide 3 text

© JAMF Software, LLC Matthew Mitchell Professional Services Engineer II Jamf

Slide 4

Slide 4 text

© JAMF Software, LLC

Slide 5

Slide 5 text

© JAMF Software, LLC Goals Learn a workflow to create custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro

Slide 6

Slide 6 text

© JAMF Software, LLC Workflow Steps 1. Create 2. Download 3. Un-sign 4. Modify 5. Sign 6. Upload

Slide 7

Slide 7 text

© JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

Slide 8

Slide 8 text

© JAMF Software, LLC Why? Troubleshoot and mitigate issues What you want, when you want

Slide 9

Slide 9 text

© JAMF Software, LLC Create

Slide 10

Slide 10 text

© JAMF Software, LLC Create

Slide 11

Slide 11 text

© JAMF Software, LLC Un-sign

Slide 12

Slide 12 text

© JAMF Software, LLC security cms -D -i /path/to/profile.mobileconfig | xmllint --format - > /path/to/output.mobileconfig Un-sign security cms -D -i /path/to/profile.mobileconfig xmllint --format - > /path/to/output.mobileconfig

Slide 13

Slide 13 text

© JAMF Software, LLC Un-sign

Slide 14

Slide 14 text

© JAMF Software, LLC Modify

Slide 15

Slide 15 text

© JAMF Software, LLC Modify

Slide 16

Slide 16 text

© JAMF Software, LLC Modify

Slide 17

Slide 17 text

© JAMF Software, LLC Modify

Slide 18

Slide 18 text

© JAMF Software, LLC Modify

Slide 19

Slide 19 text

© JAMF Software, LLC Modify

Slide 20

Slide 20 text

© JAMF Software, LLC Modify

Slide 21

Slide 21 text

© JAMF Software, LLC Sign

Slide 22

Slide 22 text

© JAMF Software, LLC openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key Sign openssl req -out ~/Desktop/CSR.csr -new -newkey rsa:2048 -nodes -keyout ~/Desktop/privateKey.key

Slide 23

Slide 23 text

© JAMF Software, LLC Sign

Slide 24

Slide 24 text

© JAMF Software, LLC openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig Sign openssl smime -sign -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -nodetach -outform der -in ~/Desktop/unsigned.mobileconfig -out ~/Desktop/signed.mobileconfig -signer ~/Desktop/cert.pem -inkey ~/Desktop/privateKey.key -in ~/Desktop/unsigned.mobileconfig

Slide 25

Slide 25 text

© JAMF Software, LLC Sign

Slide 26

Slide 26 text

© JAMF Software, LLC Upload

Slide 27

Slide 27 text

© JAMF Software, LLC Upload

Slide 28

Slide 28 text

© JAMF Software, LLC Proof

Slide 29

Slide 29 text

© JAMF Software, LLC Lock iPad into Single App Mode Enable Voice Control Allow Voice Control to be toggled off

Slide 30

Slide 30 text

© JAMF Software, LLC

Slide 31

Slide 31 text

© JAMF Software, LLC

Slide 32

Slide 32 text

© JAMF Software, LLC

Slide 33

Slide 33 text

© JAMF Software, LLC

Slide 34

Slide 34 text

© JAMF Software, LLC

Slide 35

Slide 35 text

© JAMF Software, LLC

Slide 36

Slide 36 text

© JAMF Software, LLC

Slide 37

Slide 37 text

© JAMF Software, LLC Goals Learn a workflow to create custom Configuration Profiles that only enforce the settings we want Increased understanding of how Configuration Profiles are structured Experience signing and un-signing content deployed via Jamf Pro

Slide 38

Slide 38 text

© JAMF Software, LLC Resources jamf.it/jnuc2019-ryo

Slide 39

Slide 39 text

© JAMF Software, LLC Thank you for listening! Give us feedback by completing the 2-question session survey in the JNUC 2019 app.