Deploying the Coro Agent with JAMF Pro¶

To deploy the Coro Agent to your macOS endpoints via JAMF Pro, complete the following processes:

1. Meet the listed prerequisites
2. Create and deploy a configuration profile
3. Create a deployment package
4. Create a deployment policy

Prerequisites¶

The following prerequisites are required:

• Functional JAMF Pro environment

  You must have a working JAMF Pro environment configured for your endpoints that allows package and configuration profile deployment.

• Download the Coro Agent .pkg file

  To download the Coro Agent .pkg file from the Coro console, perform the following actions:

  1. From the toolbar, select Control Panel:

     

  2. Select Devices:

     

  3. Select the Agent Deployment tab:

     

  4. Select Actions > Download adjacent to the desired macOS Agent version:

     

  The Agent installer is downloaded to your local workstation.

Creating a new Privacy Preferences Policy Control profile¶

To create a new Privacy Preferences Policy Control (PPPC) profile, perform the following steps:

1. From JAMF Pro, navigate to Computers > Configuration Profiles.
2. Select + New to create a new profile.
3. Create App Access entries
4. Create a System Extension setting

5. Select Save.

   The profile is saved and distributed to the selected devices.

Creating PPPC profile App Access entries¶

1. From the Privacy Preferences Policy Control section, select + to add a new App Access entry. Use the following field values:

   Identifier: net.coro.endsec.Coro

   Identifier Type: Bundle ID

   Code Requirement: anchor apple generic and identifier "net.coro.endsec.Coro" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)

   

2. From the App or Service section, select + Add to add three separate entries for:

   1. SystemPolicySysAdminFiles
   2. SystemPolicyAllFiles
   3. Reminders

   

3. For each entry, set Access to Allow:

   

4. From the Privacy Preferences Policy Control section, select + to add an additional App Access entry. Use the following field values:

   Identifier: net.coro.endsec.CoroService

   Identifier Type: Bundle ID

   Code Requirement: anchor apple generic and identifier "net.coro.endsec.CoroService" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)

   

5. From the App or Service section, select + Add to add three separate entries for:

   1. SystemPolicySysAdminFiles
   2. SystemPolicyAllFiles
   3. Reminders

   

6. For each entry, set Access to Allow:

   

Creating a PPPC profile System Extension setting¶

1. From the System Extension section, select + Add.

   The System Extension dialog is displayed.

2. Enable or disable Allow Users to approve system extensions as required.

   Important

   This setting has no impact on deployment of the Coro Agent; however, this is a global setting in JAMF Pro and may affect the deployment or function of other applications.

   Enable this setting to allow users to approve any system extensions for any application.

   Disable this setting to restrict users from manually installing or approving any system extensions. Only extensions specifically added to this policy through the Allowed Team ID and System Extensions tab are installed and auto-approved (as shown in the next step).

3. In the Allowed Team ID and System Extensions tab, add the following system extension values for the Coro Agent:

   Display Name: Coro

   System Extension Type: Allowed Team Identifiers

   Team Identifier: E3P52EVK39

   

4. Select Scope to select the devices or groups on which to install the Coro Agent.

Creating a deployment package¶

To create a deployment package in JAMF Pro based on the Coro Agent .pkg file (see Prerequisites):

1. Navigate to Settings (gear icon) > Computer Management > Packages.
2. Select + New to configure the upload settings for a new .pkg.
3. Provide a Display Name and Category.

4. From Filename, select Choose File. Then select the Agent .pkg file. The Agent .pkg file is uploaded. All other information is automatically populated:

   

Creating a deployment policy¶

If you already have a software distribution policy in place, add the Agent .pkg file you downloaded from the Coro console (see Prerequisites). Otherwise, create a new policy to deploy your .pkg file.

To create a new software distribution policy:

1. From JAMF Pro, navigate to Computers > Policies.
2. Select + New. The Options tab is displayed.
3. Provide a name for the new policy, for example, InstallCoro.
4. Enable the following Triggers:
   • Login
   • Enrollment Complete
   • Reoccurring Check-in
5. Set Execution Frequency to Once per Computer.

6. Enable Automatically re-run policy on Failure. Then, set Retry Event to 3 retry attempts:

   

7. From the left panel, select Packages > Configure:

   • Add the Agent .pkg file you downloaded from the Coro console in Step 1.1.
   • From the top, select Scope.
   • Add the computers and groups to which you want to distribute the Coro Agent.
8. Select the User Interaction tab.
9. Set Deferral to No Deferral Type.

10. Set Example Policy to deploy Coro .PKG and force install:

    

JAMF Pro distributes the .pkg to the devices within the chosen scope, and the previously configured Configuration Profile enables all the necessary extensions and components without requiring an Administrator login.

Verifying installation of the Coro Agent on macOS devices¶

On the macOS device, the Coro Agent appears as an application in both the Launchpad and the system tray:

Navigate to Control Panel > Devices on the Coro console to view your device: