Mac Agent/Bundle and Auto Updater- Configuration Profile

This topic describes the Configuration Profile file used in mass deployment (such as JAMF) of the Mac Agent Bundle and Auto Updater. The Configuration is located and downloaded from Management Tools section.

See Management Tools.

The Configuration Profile is downloaded prior to installing the Agent Bundle or Auto Updater.

Configuration Profiles

Use the Configuration Profiles described below:

  • IT Viewer macOS 11.signed.mobileconfig: Configuration Profile signed by Proofpoint

  • IT Viewer macOS 11.mobileconfig: Unsigned Configuration Profile, to be signed by customer

For MDM configuration profile settings see MDM Configuration Profile Settings List.

If you want to make changes to the Configuration Profile, use the version that is not signed. After making changes you must sign the configuration profile before deploying it.

Disabling Login Items Notifications (optional) - supported from macOS Ventura 13 and higher:

  • Ventura Disable Login Items Notifications Sample Profile.mobileconfig: This is a sample configuration profile showing you how to disable all background task management notifications introduced in macOS Ventura (Login Items notifications). You can entirely disable all such notifications by creating a Configuration Profile based on this sample profile. This is a system-wide profile, so if you use it, notifications that were already triggered and that exist within the Notification Center will not display.

Do not remove the configuration profile from an endpoint with an installed agent. Removing the configuration profile while the agent is installed may cause the endpoint and the agent to become unstable.

Generally when you upgrade, you will not need to change the configuration profile so you can perform the upgrade by simply installing the new Agent.

In some releases, a new configuration profile is required and you will be notified. If you are upgrading and a new configuration profile is required, you will need to uninstall the old Agent before deploying the new configuration profile and then installing the new Agent depending on the release.

Getting the Configuration Profile

Using JAMF or other management tool you can choose and upload the relevant Configuration Profile from observeit-OSX-management-tools-<version>.tar.gz that you downloaded.

The example below uses JAMF.

  1. From the JAMF Web console dashboard, click the Computer button and select Configuration Profiles from the menu on the left-side. The Configuration Profiles screen displays.

  2. Click the Upload button.

  3. Choose the configuration profile:

    The file is uploaded and the Configuration Profiles window opens.

  4. From System Preferences > Profile, you can verify that the process controller is granted access.

    For macOS Catalina, verify the process controller is allowed access to data and applications, as well as control of the computer.

  5. Continue with the deployment.

    For Mac Agent, see MDM Deployment to Install/Uninstall the Mac Bundle (JAMF).

    For Mac Auto Updater, see Mass Deployment to Install/Uninstall the Mac Auto Updater (JAMF).

Upgrading the Mac Agent when the Configuration Profile has Changed

  1. Upload the new configuration profile. (There is no need to remove the previous configuration profile.)

  2. Install the new Mac agent

Configuring Profile Permissions

The Mac configuration profile grants the Proofpoint Mac agent permissions to monitor user and file activity. To enable monitoring of all user activity (such as file activity monitoring, key logging and more), the logger must have permissions set. These are included in the configuration profile which is uploaded and deployed remotely to all the endpoints.

Related Topics:

Mac Agent ITM/ Endpoint DLP Bundle Installation

MDM Deployment to Install/Uninstall the Mac Bundle (JAMF)