This can be done automatically with Lightspeed's new utility agent, also included on the. By doing this, you will also need to re-deploy the necessary ETC files needed by the root CA. You would use the create_deploy utility included on the SmartAgent.dmg that you can download from Relay to generate a new root CA and deploy to your fleet. The autoupdate will NOT renew the CA certificate used by Relay for filtering, so you will need to renew this certificate manually before the expiration date. There is another consideration, however, that you will need to check on: the certificate utilized by Relay for filtering. That's it for what's needed for the autoupdate to work successfully. Socket Filter Bundle Identifier: -extensionĪnchor apple generic and identifier "-extension" and (certificate leaf /* exists */ or certificate 1 /* exists */ and certificate leaf /* exists */ and certificate leaf = ZAGTUU2342).When adding, select Socket Filter and use the following values:.Filter Order: Firewall (Give this the highest priority setting available).Filter Name (found at System Preferences > Network): Lightspeed Agent.Use the settings below when setting this up. Jamf will want to configure a content filter payload to pre-approve the security prompts when the Network Extension asks to filter the device. If this is the case, use the same information below to also approve these System Extensions with Network as the type. Jamf will also have you approve specific System Extension types. Jamf requires that the following Team ID and Bundle IDs are added as approved System Extensions. The process is not complicated, but there are a lot of pieces to making it work properly that have to be done in a certain order.īasically, you need to create some new profiles that will pre-approve the network extension and socket filtering to suppress the permission prompts on devices, as outlined in steps 5 & 6 under MDM deployment in the guide that you linked.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |