Skip to content

Instantly share code, notes, and snippets.

@lucascantor

lucascantor/signMobileconfigFiles.md

Last active February 10, 2018 18:19
Show Gist options
  • Save lucascantor/15111ac16889637fca08aef437c025e7 to your computer and use it in GitHub Desktop.
Save lucascantor/15111ac16889637fca08aef437c025e7 to your computer and use it in GitHub Desktop.
Download ZIP
Sign configuration profiles to prevent Jamf from modifying them, ensuring only your explicitly configured settings are applied.
Raw
signMobileconfigFiles.md
  • Save a plaintext filename.mobileconfig file that enforces your desired settings
  • Create a self-signed certificate using Keychain Access
    • Certificate Type: Code Signing
  • Sign the plaintext filename.mobileconfig as filename-signed.mobileconfig
    • /usr/bin/security cms -S -N "<Code Signing Certificate Name Here>" -i "filename.mobileconfig" -o "filename-signed.mobileconfig"
  • Click the Upload button on your JSS Configuration Prifiles Page to upload your signed filename-signed.mobileconfig
  • Jamf states the uploaded configuration profile is in read-only mode, because it is signed
  • Use Jamf to scope the configuration profile to your desired Macs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment