Introduction
We have consolidated the installer profiles from seven to two. When you deploy the Agent through an MDM solution (e.g., Jamf Pro, Microsoft Intune, Kandji, etc.), install these 2 profiles on the Macs so the Agent gets all the permissions it needs, without users having to approve them manually.
Note: The Screen Recording permission can't be granted through an MDM profile. It must be approved locally on the Mac and is only needed for Standard Video recording. For more information, see How to configure the macOS permission settings (Revealed Agent) or How to configure the macOS permission settings (Stealth Agent).
Profiles to Install
Download both profiles and install them through your MDM:
Main Profile (All-in-One): Grants all the permissions the Agent requires. Download allinone.mobileconfig
VPN Profile: Provides the network configuration the Agent needs for network monitoring. Download VPN.mobileconfig
When You Need These Profiles
New Deployments: When you install the Mac Agent remotely through an MDM.
Existing Deployments: When your Macs still use the old profiles. Replace them with the 2 new profiles, as described in the Replacing the Old Profiles section below.
macOS 27 Upgrades: Before you upgrade the Macs to macOS 27. For more information, see Teramind Customer Brief: macOS 27 (Golden Gate) Support.
Replacing the Old Profiles
If your Macs already have the old profiles installed, replace them in this order:
Install the 2 new profiles and assign them to the Macs.
Remove the old profiles.
Note: Keep this order. If you remove the old profiles first, the Agent can lose its permissions until the new profiles are applied.
The old profiles include:
accessibility.mobileconfigextensions.mobileconfigfull_disk_access.mobileconfigcertificate.mobileconfigortls_certificate.mobileconfigVPN profile.mobileconfigbackground_suppression.mobileconfig
Adding the Profiles to Your MDM
The exact steps depend on your MDM. In general, upload each mobileconfig file as a custom configuration profile and scope it to the Macs where the Agent is installed.
Jamf Pro: See the Apply the Configuration Profiles section in How to install the Mac Agent remotely using Jamf.
Other MDMs: See your MDM’s documentation on uploading a custom configuration profile.
