Skip to main content

How to install the Mac Agent configuration profiles via MDM

Install the 2 configuration profiles the Mac Agent needs through your MDM.

Introduction

We have consolidated the installer profiles from seven to two. When you deploy the Agent through an MDM solution (e.g., Jamf Pro, Microsoft Intune, Kandji, etc.), install these 2 profiles on the Macs so the Agent gets all the permissions it needs, without users having to approve them manually.

Note: The Screen Recording permission can't be granted through an MDM profile. It must be approved locally on the Mac and is only needed for Standard Video recording. For more information, see How to configure the macOS permission settings (Revealed Agent) or How to configure the macOS permission settings (Stealth Agent).

Profiles to Install

Download both profiles and install them through your MDM:

When You Need These Profiles

  • New Deployments: When you install the Mac Agent remotely through an MDM.

  • Existing Deployments: When your Macs still use the old profiles. Replace them with the 2 new profiles, as described in the Replacing the Old Profiles section below.

  • macOS 27 Upgrades: Before you upgrade the Macs to macOS 27. For more information, see Teramind Customer Brief: macOS 27 (Golden Gate) Support.

Replacing the Old Profiles

If your Macs already have the old profiles installed, replace them in this order:

  1. Install the 2 new profiles and assign them to the Macs.

  2. Remove the old profiles.

Note: Keep this order. If you remove the old profiles first, the Agent can lose its permissions until the new profiles are applied.

The old profiles include:

  • accessibility.mobileconfig

  • extensions.mobileconfig

  • full_disk_access.mobileconfig

  • certificate.mobileconfig or tls_certificate.mobileconfig

  • VPN profile.mobileconfig

  • background_suppression.mobileconfig

Adding the Profiles to Your MDM

The exact steps depend on your MDM. In general, upload each mobileconfig file as a custom configuration profile and scope it to the Macs where the Agent is installed.

Related Articles

Attachment icon
Did this answer your question?