Deploying Coro for Mac Endpoints via Jamf
This guide will walk you through the process for deploying Coro to macOS endpoints using Jamf Pro. Note, to successfully deploy Coro to Mac endpoints via Jamf, you’ll need to create and deploy a configuration profiles, a package, and a policy in Jamf Pro.
Table of Contents:
- Pre-Reqs:
- Step #1 - Configuring Coro System Extension Profile in Jamf
- Step #2 - Configuring Coro Full Disk Access Configuration Profile in Jamf Pro
- Step #3 - Configuring Coro Notifications ENABLED Configuration Profile in Jamf Pro
- Step #4 - Uploading Coro Package in Jamf Pro
- Step #5 - Creating a Policy to Deploy Coro in Jamf Pro
- Step #6 - Verifying Successful Install of Coro on macOS
Pre-Reqs:
- Customers must download Coro .pkg file from Coro admin console
- Coro Admin Console > Control Panel > Devices > Copy Download Link and download locally on macOS machine to upload to Jamf Pro
- Customers must have a working Jamf environment configured for their endpoints that allows deployment of packages as well as configuration profiles
Step #1 - Configuring Coro System Extension Profile in Jamf Pro
- In Jamf Pro, go to Computers > Configuration Profiles > New
- Create a new Configuration Profile and give it a name such as "Coro System Extensions"
- Scrolls down and select “System Extension” option within your new Configuration Profile
- Once in the “System Extension” window, you can configure the profile as follows:
- Display Name: Coro App Bundle
- System Extension Type: Allowed System Extensions
- Team Identifier: E3P52EVK39
-
Allowed System Extensions:
- net.coro.endsec.CoroService
- net.coro.endsec.Coro
- Example System Extensions Profile -
- Save the configuration profile and scope the configuration profile to your macOS endpoints that need Coro
Step #2 - Configuring Coro Full Disk Access Configuration Profile in Jamf Pro
- In Jamf Pro, go to Computers > Configuration Profiles > New
- Create a new Configuration Profile and give it a name such as "Coro System Extensions"
- Scrolls down and select “Privacy Preferences Policy Control” option within your new Configuration Profile
- Once in the “Privacy Preferences Policy Control” window, you can configure the profile as follows:
-
Identifier: net.coro.endsec.Coro
- Note, you’ll create a duplicate entry with coro.endsec.CoroService as well!
- Identifier Type: Bundle ID
-
Code Requirements;
- anchor apple generic and identifier "net.coro.endsec.Coro" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists / or certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = E3P52EVK39)
- Click Add near ‘APP OR SERVICE’ and Select “System Policy Files”
- Set Access to ALLOWED
- Example Coro ALLOW Full Disk Access PPPC Profile –
-
Identifier: net.coro.endsec.Coro
- Save the configuration profile and scope the configuration profile to your macOS endpoints that need Coro
Step #3 - Configuring Coro Notifications ENABLED Configuration Profile in Jamf Pro
- In Jamf Pro, go to Computers > Configuration Profiles > New
- Create a new Configuration Profile and give it a name such as "Coro System Extensions"
- Scrolls down and select “Notifications” option within your new Configuration Profile
- Once in the “Notifications” window, you can configure the profile as follows:
- App: Coro\ Endpoint\ Protection.app
- Bundle ID:coro.endsec.Coro
-
Settings
- Critical Alerts - ENABLED
- Notifications - ENABLED
- Banner Alert Type - Temporary
- Notifications on Lock Screen - Display
- Badge App Icon - Display
- Play Sound for notifications - Display
- Example Coro Enforce Notifications Configuration Profile -
- Save the configuration profile and scope the configuration profile to your macOS endpoints that need Coro
Step #4 - Uploading Coro Package in Jamf Pro
- In Jamf Pro, go to All Settings > Computer Management > Packages > New
- Create a new Package and under “File Name” upload the .PKG file you downloaded from your Coro admin console
- This will populate all necessary information for your new package automatically.
- Example Package for Coro –
Next, you’ll need to create a policy to deploy your .PKG file
Step #5 - Creating a Policy to Deploy Coro in Jamf Pro
- In Jamf Pro, go to Computers > Policies> New
- Create a new Policy and give it a friendly name such as “InstallCoro”
-
Configure Policy Trigger as:
- Login
- Enrollment Complete
- Reoccurring Check-in
-
Configure Execution Frequency as:
-
Once per Computer
- Automatically re-run upon failed attempt (3 retry attempts)
-
User Interaction
- Deferral
- No Deferral Type
- Example Policy to deploy Coro .PKG and force install -
- Deferral
-
Once per Computer
-
Configure Policy Trigger as:
Step #6 - Verifying Successful Install of Coro on macOS
- On the macOS endpoint, you will see Coro as an application within the
'Launchpad 'as well as within the system tray
2. On the Coro Admin Console, you’ll see your machine under > Devices
-
- Example endpoint in Coro Admin Console -