Computer Configuration Profiles

Computer configuration profiles are XML files (.mobileconfig) that provide an easy way to define settings and restrictions for Mac computers and users.

You can use Jamf Pro to manually create a computer configuration profile or upload a configuration profile that was created using Apple’s Profile Manager.

Before creating a configuration profile, you should have basic knowledge of configuration profile payloads and settings, and how they affect computers. For detailed information about each payload and setting, see Apple’s Profile Manager documentation at:

https://help.apple.com/profilemanager/mac

Some configuration profile settings are unique to Jamf Pro. For more information on these settings, see the following Knowledge Base article:

Configuration Profiles Reference

When you create a computer configuration profile, you must specify the level at which to apply the profile—computer level or user level. Each level has a unique set of payloads and a few that are common to both. There are two different ways to distribute a computer configuration profile: install it automatically (requires no interaction from the user) or make it available in Self Service. You can also specify the computers and users to which the profile should be applied (called “scope”).

Payload Variables for Computer Configuration Profiles

There are several payload variables that you can use to populate settings in a computer configuration profile with attribute values stored in Jamf Pro. This allows you to create payloads containing information about each computer and user to which you are distributing the profile.

To use a payload variable, enter the variable into any text field when creating a configuration profile in Jamf Pro. When the profile is installed on a computer, the variable is replaced with the value of the corresponding attribute in Jamf Pro.

Variable

Computer Information

$COMPUTERNAME
or
$DEVICENAME

Computer Name

$SITENAME

Site Name

$SITEID

Site ID

$UDID

UDID

$SERIALNUMBER

Serial Number

$USERNAME

Username associated with the computer in Jamf Pro
(computer-level profiles only)

Username of the user logging in to the computer
(user-level profiles only)

$FULLNAME or $REALNAME

Full Name

$EMAIL

Email Address

$PHONE

Phone Number

$POSITION

Position

$DEPARTMENTNAME

Department Name

$DEPARTMENTID

Department ID

$BUILDINGNAME

Building Name

$BUILDINGID

Building ID

$ROOM

Room

$MACADDRESS

MAC Address

$JSSID

Jamf Pro ID

$PROFILEJSSID

Jamf Pro ID of the Configuration Profile

$EXTENSIONATTRIBUTE_<#>

Value for any LDAP Attribute

Note: An $EXTENSIONATTRIBUTE_<#> variable is generated each time you create an extension attribute with the “LDAP Attribute Mapping” input type. For more information, see Computer Extension Attribute Input Types.

Requirements

To install a computer configuration profile, you need:

  • A push certificate in Jamf Pro (For more information, see Push Certificates.)

  • The Enable certificate-based authentication and Enable push notifications settings configured in Jamf Pro (For more information, see Security Settings.)

  • Computers with macOS 10.7 or later

  • (User-level profiles only) Computers that are bound to a directory service or local user accounts that have been MDM-enabled (For information, see Binding to Directory Services and the Enabling MDM for Local User Accounts Knowledge Base article.)

Manually Creating a Computer Configuration Profile

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Configuration Profiles.

  4. Click New images/download/thumbnails/16441848/Icon_New_Button.png .

  5. Use the General payload to configure basic settings, including the level at which to apply the profile and the distribution method.
    Only payloads and settings that apply to the selected level are displayed for the profile.

  6. Use the rest of the payloads to configure the settings you want to apply.

  7. Click the Scope tab and configure the scope of the profile.
    For more information, see Scope.

  8. (Optional) If you chose to distribute the profile in Self Service, click the Self Service tab to configure Self Service settings for the profile.
    For more information, see Making Items Available to Users in Jamf Self Service for macOS.

  9. Click Save.

Uploading a Computer Configuration Profile

You can create a computer configuration profile by uploading a profile that was created using Apple’s Profile Manager.

Note: Some payloads and settings configured with Profile Manager are not displayed in Jamf Pro. Although you cannot view or edit these payloads, they are still applied to computers and users.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Configuration Profiles.

  4. Click Upload and upload the configuration profile (.mobileconfig).

  5. Use the General payload to change or configure basic settings for the profile, including a distribution method.

  6. Use the rest of the payloads to configure or edit settings as needed.

  7. Click the Scope tab and configure the scope of the profile.
    For more information, see Scope.

  8. (Optional) If you chose to distribute the profile in Self Service, click the Self Service tab to configure Self Service settings for the profile.
    For more information, see Making Items Available to Users in Jamf Self Service for macOS.

  9. Click Save.

Downloading a Computer Configuration Profile

If you want to view the contents of a computer configuration profile for troubleshooting purposes, you can download the profile (.mobileconfig) from Jamf Pro.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Configuration Profiles.

  4. Click the configuration profile you want to download.

  5. Click Download.

The profile downloads immediately.

Viewing the Status of a Computer Configuration Profile

For each computer configuration profile, you can view the number of computers for which the profile installation has a status of Completed, Remaining, or Failed.

Note: Depending on your system configuration, some historical status data may not be available for profiles installed using Jamf Pro 9.63 or earlier.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Configuration Profiles.
    A list of computer configuration profiles is displayed.
    For each profile, you can view the number of computers for which the profile installation has a Completed, Remaining, or Failed status.
    Note: If a computer becomes unmanaged after a profile is successfully distributed to it, the profile will continue to be displayed in the Completed column.

  4. To view a list of computers for which the profile installation has a Completed, Remaining, or Failed status, click the number displayed in the corresponding column. Then click Done.

Viewing Logs for a Computer Configuration Profile

The logs for a computer configuration profile include a list of computers that are in the scope of the profile, as well as the username of the user who installed the profile, the date/time that the status was last updated, and the status of the profile for each computer.

Note: Depending on your system configuration, some historical log data may not be available for profiles installed using 9.63 or earlier.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Configuration Profiles.
    A list of computer configuration profiles is displayed.

  4. Click View next to the configuration profile you want to view logs for.
    A list of computers that are in the scope of the configuration profile is displayed.

  5. To view logs for a different date range, specify the starting and ending dates using the Date Range pop-up calendars.

  6. Click Done.

Related Information

For related information, see the following sections in this guide:

For related information, see the following technical paper:

Enabling Jamf Pro as SCEP Proxy
Learn how to enable Jamf Pro as SCEP Proxy for distributing certificates via configuration profiles.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.