MDM Deployment for the Mac Bundle and Mac Updater VMware Workspace ONE (AirWatch)

This topic describes how to deploy Mac agents using VMware Workspace ONE (Airwatch).

Prerequisites

Before you begin, you must

• Download observeit-OSX-management-tools-<version>.tar.gz from Management Tools (see Management Tools).

• Download observeit-cloudagent-OSX-<version>.pkg file to your desktop or another folder that is easily accessible.

• Download the Shell Script for the Realm (See Shell Script for Mac Agent and Auto Updater.)

Setting up the Configuration Profile File

Configuration Profiles

Use the Configuration Profiles described below:

• IT Viewer macOS 11.signed.mobileconfig: Configuration Profile signed by Proofpoint

• IT Viewer macOS 11.mobileconfig: Unsigned Configuration Profile, to be signed by customer

For MDM configuration profile settings see MDM Configuration Profile Settings List.

If you want to make changes to the Configuration Profile, use the version that is not signed. After making changes you must sign the configuration profile before deploying it.

Disabling Login Items Notifications (optional) - supported from macOS Ventura 13 and higher:

• Ventura Disable Login Items Notifications Sample Profile.mobileconfig: This is a sample configuration profile showing you how to disable all background task management notifications introduced in macOS Ventura (Login Items notifications). You can entirely disable all such notifications by creating a Configuration Profile based on this sample profile. This is a system-wide profile, so if you use it, notifications that were already triggered and that exist within the Notification Center will not display.

Installation

Initially, you must download the Workspace ONE Mobileconfig Importer. You will use the Workspace ONE Mobileconfig Importer to import the downloaded Configuration Profile file.

1. Log in to VMware Workspace ONE (AirWatch).

2. If you have not previously downloaded the Workspace ONE mobileconfig Importer:  After logging in, agree to the Technical Preview License and then download the Workspace ONE Mobileconfig Importer. The file is downloaded. You do not have to repeat this step evey time you import a Configuration Profile.

   When prompted, click Open to verify that you want open the Workspace ONE Mobileconfig Importer.

   Workspace ONE Mobileconfig Importer screen opens.

   

3. In the Workspace ONE Mobileconfig Importer, Click Select a File button and browse to chose the Configuration Profile that you dowloaded previously from the platform. The relevant fields in the Importer are automatically completed.

4. On the right-side, Enter the VMware Workspace ONE Managed OG. You must complete this field.

5. Click Create Profile.

   Once the Workspace ONE Profile is created, you can deploy it to the endpoints from Workspace ONE Management Console.

Deploying the Agent

Before you begin, modify the relevant fields in the Shell script. For information on how to modify the fields, see Shell Script for Mac Agent and Auto Updater.

1. Select Apps & Books > Applications from the menus on the left and the Native area displays.

   

2. Click Add Application.

   The Add Application area displays. Click Continue.

   

3. The Add dialog box displays. Browse to the file you want to upload and click Save. (This is the .pkg file included in observeit-cloudagent-OSX-<version>.pkg that you downloaded in observeit-cloudagent<version>.tar. (See Mac Agent ITM/ Endpoint DLP Bundle Installation.)

   

4. In the Add Application area, click Continue to go to Workspace One Admin Assistant where you will export the Metadata File.

   If this is the first time you are doing this, you must download and install the Workspace One Admin Assistant before you can proceed.

   

5. In the Administrative Assistant, select the file .(pkg) and click Open and the file parsing begins.

   

6. When the parsing is complete, click Reveal in Finder.

   

7. The Finder opens. Locate the plist file that was created.

   

8. You are returned to the Add Application area. Browse to the .plist file and click Upload. The click Continue.

   

9. In the Edit Application area, select the Scripts tab.

   In the Pre-Install Script field, copy the contents from the Shell Script for Mac Agent and Auto Updater

   In the Pre-Uninstall field, copy the contents of the preuninstall script.

   Click Save & Assign.

   

10. In the Select Assignment Groups field, select the groups where the agent will be installed. Click Add.

    

11. Preview Assigned Devices and click Publish.

    

---

Related Topics:

Mac Agent ITM/ Endpoint DLP Bundle Installation

MDM Deployment to Install/Uninstall the Mac Bundle (JAMF)