Deploying Coro with JAMF Pro (macOS) – Support

Deploying Coro for Mac Endpoints via JAMF

To successfully deploy Coro to Mac endpoints via JAMF, you need to:

Create and deploy a configuration profile
Create a package
Create a policy in JAMF Pro

1 - Pre-Requisites

The following pre-requisites are required:

Functional JAMF environment
Coro .pkg file

1.2 - Functional JAMF environment

You must have a working JAMF environment configured for your endpoints that allows package and configuration profile deployment.

1.1 - Download the Coro .pkg file

To download the Coro .pkg file from Coro admin console, perform the following actions:

From the toolbar click Control Panel.
Click Devices.
From the tab control click Agent Deployment.
Click Actions > Download adjacent to the desired macOS agent version.

The agent is downloaded.

2 - Create a new Privacy Preferences Policy Control (PPPC) profile

To create a new JAMF PPPC profile, perform the following steps:

From JAMF Pro, navigate to Computers > Configuration Profiles.
Click + New to create a new profile.

2.1 - Create PPPC profile App Access entries

From the Privacy Preferences Policy Control section click + to add a new App Access entry. use the following field values:

Identifier: net.coro.endsec.Coro
Identifier Type: Bundle ID
Code Requirement: anchor apple generic and identifier "net.coro.endsec.Coro" and
(certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate
1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate
leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] =
E3P52EVK39)
From the App or Service section, click + Add to add three separate entries for:
1. SystemPolicySysAdminFiles
2. SystemPolicyAllFiles
3. Reminders.
For each entry, set Access to Allow.
From the Privacy Preferences Policy Control section, click + to add an additional App Access entry. Use the following field values:

Identifier: net.coro.endsec.CoroService
Identifier Type: Bundle ID
Code Requirement: anchor apple generic and identifier "net.coro.endsec.CoroService" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = E3P52EVK39)
From the App or Service section, click + Add to add three separate entries for:
1. SystemPolicySysAdminFiles
2. SystemPolicyAllFiles
3. Reminder
For each entry, set Access to Allow.

2.2 - Create PPPC profile System Extension settings

From the System Extension section, click + Add to create a new System Extension setting.
The System Extension window is displayed.
Disable Allow Users to approve system extensions.
Use the following field values:

Display Name: Coro
System Extension Type: Allowed Team Identifiers
Team Identifier: E3P52EVK39
Click Scope to select which devices or groups to install Coro on.

2.3 - Save PPPC profile

Click Save.
The profile is saved and distributed to the selected devices.

3 - Upload the .pkg file

To upload the .pkg file from Step 1.1:

Navigate to Settings (gear icon) > Computer Management > Packages.
Click + New to configure the upload settings for a new .pkg.
Provide a Display Name and Category.
From Filename, select Choose File and select the .pkg file.
The .pkg file is uploaded. All other information is automatically populated.

4 - Deployment policies

If you already have a software distribution policy in place, simply add the .pkg file you downloaded from the Coro Console in Step 1.1, else you must create a new policy to deploy your .pkg file.

To create a new software distribution policy:

From JAMF Pro, navigate to Computers > Policies.
Click + New.
The Options tab is displayed.
Provide a name for the new policy, for example, InstallCoro.
Enable the following Triggers:
- Login
- Enrollment Complete
- Reoccurring Check-in
Set Execution Frequency as:
- Once per Computer
Enable Automatically re-run policy on Failure.
- Set Retry Event to 3 retry attempts.
From the left panel, select Packages > Configure.
- Add the .pkg file you downloaded from the Coro Console in Step 1.1.
- From the top, select Scope.
- Add the computers and groups to which you want to distribute Coro.
Select the User Interaction tab.
Set Deferral to No Deferral Type.
Set Example Policy to deploy Coro .PKG and force install.

JAMF distributes the .pkg to the devices within the chosen scope, and the previously configured Configuration Profile will enable all the necessary extensions and components without requiring an Administrator login.