Deploying the Coro Agent with JAMF Pro

To deploy the Coro Agent to your macOS endpoints via JAMF Pro, complete the following processes:

  1. Meet the listed prerequisites
  2. Create and deploy a configuration profile
  3. Create a deployment package
  4. Create a deployment policy

Prerequisites

The following prerequisites are required:

  • Functional JAMF Pro environment

    You must have a working JAMF Pro environment configured for your endpoints that allows package and configuration profile deployment.

  • Download the Coro Agent .pkg file

    To download the Coro Agent .pkg file from the Coro console, perform the following actions:

    1. From the toolbar, select Control Panel :

      Control Panel button

    2. Select Devices :

      Devices button

    3. Select the Agent Deployment tab:

      Agent Deployment tab

    4. Select Actions > Download adjacent to the desired macOS Agent version:

      Download link

    The Agent installer is downloaded to your local workstation.

Creating a new Privacy Preferences Policy Control profile

To create a new Privacy Preferences Policy Control (PPPC) profile, perform the following steps:

  1. From JAMF Pro, navigate to Computers > Configuration Profiles .
  2. Select + New to create a new profile.
  3. Create App Access entries
  4. Create a System Extension setting
  5. Select Save .

    The profile is saved and distributed to the selected devices.

Creating PPPC profile App Access entries

  1. From the Privacy Preferences Policy Control section, select + to add a new App Access entry. Use the following field values:

    Identifier: net.coro.endsec.Coro

    Identifier Type: Bundle ID

    Code Requirement: anchor apple generic and identifier "net.coro.endsec.Coro" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)

    JAMF Pro app access entry

  2. From the App or Service section, select + Add to add three separate entries for:
    1. SystemPolicySysAdminFiles
    2. SystemPolicyAllFiles
    3. Reminders

    JAMF Pro app or service

  3. For each entry, set Access to Allow :

    JAMF Pro app or service access

  4. From the Privacy Preferences Policy Control section, select + to add an additional App Access entry. Use the following field values:

    Identifier: net.coro.endsec.CoroService

    Identifier Type: Bundle ID

    Code Requirement: anchor apple generic and identifier "net.coro.endsec.CoroService" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)

    JAMF Pro app access

  5. From the App or Service section, select + Add to add three separate entries for:
    1. SystemPolicySysAdminFiles
    2. SystemPolicyAllFiles
    3. Reminders

    JAMF Pro app or service

  6. For each entry, set Access to Allow :

    JAMF Pro app or service access

Creating a PPPC profile System Extension setting

  1. From the System Extension section, select + Add .

    The System Extension dialog is displayed.

  2. Enable or disable Allow Users to approve system extensions as required.
    Important

    This setting has no impact on deployment of the Coro Agent; however, this is a global setting in JAMF Pro and may affect the deployment or function of other applications.

    Enable this setting to allow users to approve any system extensions for any application.

    Disable this setting to restrict users from manually installing or approving any system extensions. Only extensions specifically added to this policy through the Allowed Team ID and System Extensions tab are installed and auto-approved (as shown in the next step).

  3. In the Allowed Team ID and System Extensions  tab, add the following system extension values for the Coro Agent:

    Display Name: Coro

    System Extension Type: Allowed Team Identifiers

    Team Identifier: E3P52EVK39

    JAMF Pro system extensions

  4. Select Scope to select the devices or groups on which to install the Coro Agent.

Creating a deployment package

To create a deployment package in JAMF Pro based on the Coro Agent .pkg file (see Prerequisites):

  1. Navigate to Settings (gear icon) > Computer Management > Packages .
  2. Select + New to configure the upload settings for a new .pkg.
  3. Provide a Display Name and Category .
  4. From Filename , select Choose File . Then select the Agent .pkg file. The Agent .pkg file is uploaded. All other information is automatically populated:

    Upload the Coro Agent .pkg file

Creating a deployment policy

If you already have a software distribution policy in place, add the Agent .pkg file you downloaded from the Coro console (see Prerequisites). Otherwise, create a new policy to deploy your .pkg file.

To create a new software distribution policy:

  1. From JAMF Pro, navigate to Computers > Policies .
  2. Select + New . The Options tab is displayed.
  3. Provide a name for the new policy, for example, InstallCoro .
  4. Enable the following Triggers :
    • Login
    • Enrollment Complete
    • Reoccurring Check-in
  5. Set Execution Frequency to Once per Computer .
  6. Enable Automatically re-run policy on Failure . Then, set Retry Event to 3 retry attempts :

    Auto rerun policy on failure

  7. From the left panel, select Packages > Configure :
    • Add the Agent .pkg file you downloaded from the Coro console in Step 1.1.
    • From the top, select Scope .
    • Add the computers and groups to which you want to distribute the Coro Agent.
  8. Select the User Interaction tab.
  9. Set Deferral to No Deferral Type .
  10. Set Example Policy to deploy Coro .PKG and force install :

    JAMF Pro User Interaction tab

JAMF Pro distributes the .pkg to the devices within the chosen scope, and the previously configured Configuration Profile enables all the necessary extensions and components without requiring an Administrator login.

Verifying installation of the Coro Agent on macOS devices

On the macOS device, the Coro Agent appears as an application in both the Launchpad and the system tray:

Verify installation on macOS

Navigate to Control Panel > Devices on the Coro console to view your device:

Verify device in Coro