Deploying Coro with JAMF Pro¶
To deploy Coro to your macOS endpoints via JAMF Pro, complete the following processes:
Pre-Requisites¶
The following pre-requisites are required:
-
Functional JAMF environment
You must have a working JAMF environment configured for your endpoints that allows package and configuration profile deployment.
-
Download the Coro .pkg file
To download the Coro .pkg file from Coro admin console, perform the following actions:
-
From the toolbar click Control Panel.
-
Click Devices.
-
From the tab control, click Agent Deployment.
-
Click Actions > Download adjacent to the desired macOS agent version.
The agent is downloaded.
-
Create a new Privacy Preferences Policy Control (PPPC) profile¶
To create a new JAMF PPPC profile, perform the following steps:
- From JAMF Pro, navigate to Computers > Configuration Profiles.
- Click + New to create a new profile.
Create PPPC profile App Access entries¶
-
From the Privacy Preferences Policy Control section click + to add a new App Access entry. use the following field values:
Identifier: net.coro.endsec.Coro
Identifier Type: Bundle ID
Code Requirement: anchor apple generic and identifier "net.coro.endsec.Coro" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)
-
From the App or Service section, click + Add to add three separate entries for:
- SystemPolicySysAdminFiles
- SystemPolicyAllFiles
- Reminders
-
For each entry, set Access to Allow.
-
From the Privacy Preferences Policy Control section, click + to add an additional App Access entry. Use the following field values:
Identifier: net.coro.endsec.CoroService
Identifier Type: Bundle ID
Code Requirement: anchor apple generic and identifier "net.coro.endsec.CoroService" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)
-
From the App or Service section, click + Add to add three separate entries for:
- SystemPolicySysAdminFiles
- SystemPolicyAllFiles
- Reminders
-
For each entry, set Access to Allow.
Create PPPC profile System Extension settings¶
-
From the System Extension section, click + Add to create a new System Extension setting. The System Extension window is displayed.
-
Disable Allow Users to approve system extensions.
-
Use the following field values:
Display Name: Coro
System Extension Type: Allowed Team Identifiers
Team Identifier: E3P52EVK39
-
Click Scope to select which devices or groups to install Coro on.
Save PPPC profile¶
-
Click Save.
The profile is saved and distributed to the selected devices.
Upload the .pkg file¶
To upload the Coro .pkg file (see Prerequisites):
- Navigate to Settings (gear icon) > Computer Management > Packages.
- Click + New to configure the upload settings for a new .pkg.
- Provide a Display Name and Category.
-
From Filename, select Choose File and select the .pkg file. The .pkg file is uploaded. All other information is automatically populated.
Deployment policies¶
If you already have a software distribution policy in place, add the .pkg file you downloaded from the Coro Console (see Prerequisites). Otherwise you must create a new policy to deploy your .pkg file.
To create a new software distribution policy:
- From JAMF Pro, navigate to Computers > Policies.
- Click + New. The Options tab is displayed.
- Provide a name for the new policy, for example, InstallCoro.
- Enable the following Triggers:
- Login
- Enrollment Complete
- Reoccurring Check-in
- Set Execution Frequency as:
- Once per Computer
-
Enable Automatically re-run policy on Failure.
- Set Retry Event to 3 retry attempts.
-
From the left panel, select Packages > Configure.
- Add the .pkg file you downloaded from the Coro Console in Step 1.1.
- From the top, select Scope.
- Add the computers and groups to which you want to distribute Coro.
- Select the User Interaction tab.
- Set Deferral to No Deferral Type.
-
Set Example Policy to deploy Coro .PKG and force install.
JAMF distributes the .pkg to the devices within the chosen scope, and the previously configured Configuration Profile will enable all the necessary extensions and components without requiring an Administrator login.
Verify Installation of Coro on macOS¶
On the macOS endpoint, Coro appears as an application in both the Launchpad and the system tray.
Navigate to Control Panel > Devices on the Coro Console to view your machine.