Addigy MDM macOS Deployment

In this article we'll walk through how to set up Addigy MDM to deploy the Zorus Filtering Agent for macOS.

**Please note that the Mac agent is still in late-stage beta.**

 

Compatible macOS Versions

 

Step 1. Once you have your Apple Push Notification uploaded, you're ready to start downloading the provided MDM configuration profiles using the link below:

 

Don't download the MSP Filtering (DNS).mobileconfig profile as that is no longer needed.

 

MDM Configuration Profiles

From here, you'll want to upload those to Addigy by navigating to the Catalog on the left sidebar and then clicking on MDM Profiles.

Screenshot 2023-11-29 at 1.12.28 PM

Next, you'll click "New" in the top right and then use the "Custom Profile" button to upload the profiles you just downloaded.

Screenshot 2023-11-29 at 1.13.42 PM

Screenshot 2023-11-29 at 1.14.31 PM

Screenshot 2023-11-29 at 1.16.24 PM-1

Do this for all 6 profiles you downloaded.

 

Step 2. Now you'll want to create a new policy and add the MDM profiles that were just uploaded (or you can add to an existing policy if you have it).

Screenshot 2023-11-29 at 1.19.41 PM

Screenshot 2023-11-29 at 1.20.58 PM

Screenshot 2023-11-29 at 1.22.24 PM

Once you have this completed, you can click the MDM Profiles tab on the left of the Policy and select the Profiles that were previously uploaded in Step 1. 

Screenshot 2023-12-05 at 3.55.21 PM

 

Step 3. The next step is to set up a variable for the Deployment Token. To do this, you'll first need to enable the "Variables" setting by going to the Account tab in the bottom left sidebar and then clicking on "Settings". 

Screenshot 2023-11-29 at 1.26.47 PM

Scroll to the bottom of the page and toggle on the "Variables" feature.

NOTE: Variables is a Beta feature of Addigy, you may run into issues using this. This is not needed to deploy our agent, only needed to have different tokens stored in Addigy making it easier to deploy scripts without having to edit the script to change the token for different clients each time you deploy.

Screenshot 2023-11-29 at 1.37.20 PM

Next, we'll go to the Catalog tab in the left sidebar and click Variables in the dropdown list. Then you'll click the "New" button in the top right of the Account Variables page.

Screenshot 2023-11-29 at 1.38.33 PM

Screenshot 2023-11-29 at 1.39.42 PM

In the pop-up dialog box, you'll enter "ZorusKey" for the Key value, you can leave the Default value blank. The Type will be "Plain Text".

Finally, you'll need to click the "Add Policy Variation" button to select the corresponding policy created earlier as well as populate the field next to it with your token value. Click Save when complete.

Screenshot 2023-11-29 at 1.41.41 PM

 

Step 4. For this step, we're going to need to upload and configure the deployment script. You can grab the script required right here: Script 

Once you have that, navigate to the Catalog tab in the left sidebar again and click "Software" and then click the "New" button in the top right to create a new script under the Smart Software tab.

Screenshot 2023-11-29 at 1.50.08 PM

Screenshot 2023-11-30 at 1.47.17 PM

This is the point where you'll want to copy and paste the provided script (link above) into the script editor. The only modification you need to make to the script itself is to add the variable we created earlier by replacing YourDeploymentTokenHere with $ZorusKey (leave quotes in place) so it pulls that token value from the variables section.

NOTE: If you are not using the Beta variables feature Addigy provides just input your Clients token in YourDeploymentTokenHere instead of replacing it with $ZorusKey.

Screenshot 2023-11-30 at 1.52.28 PM

Additionally, you'll want to add a "Condition for Install" down below the main script and use the "If app" checkbox with the file path /Applications/MSP-Filtering.app along with setting the version to greater than or equal to version 1.0. You'll also want to ensure the "Install if app not present" checkbox is selected as well.

Screenshot 2023-11-30 at 1.56.11 PM

Once you've saved the script, you'll still need to assign the script to the policy created earlier. To do this, click the three dots next to the script and then select "Assignments". From there, just select the policy you'd like it applied to and click "Save".

Screenshot 2023-11-30 at 1.57.08 PM

Screenshot 2023-11-30 at 1.58.31 PM

 

Step 5. The final step here will be to download the MDM profile from your Policies tab. Navigate to the "Add Devices" section in the left sidebar. From the presented dropdown, select the policy you assigned the script to in the previous step and from there you'll be able to download or send over the enrollment profile for that policy.

Screenshot 2023-11-30 at 2.04.53 PM

Screenshot 2023-11-30 at 2.06.36 PM

Conclusion. When all of these steps are complete, the profiles should first install themselves on the device and then the script itself will run to install the Zorus Filtering Agent.