Create and assign two smart computer groups for the macOS agent deployment.

You must set the scope of two smart computer groups to the configuration profile and software policy. This scope ensures that the configuration profile is deployed to the endpoint before you install the Carbon Black App Control macOS agent. If you deploy the Carbon Black App Control agent without having deployed the configuration profile, the user receives approval prompts. If the prompts are not approved, the agent is not fully functional.

Note: Before you can select the Carbon Black App Control Settings Configuration Profile in the second smart group (steps 5 through 10), you must first deploy the configuration profile to a macOS endpoint and update the endpoint inventory. After Jamf Pro recognizes the installed configuration profile, the profile becomes a selectable option when you are creating the smart computer group.

Procedure

  1. On the Jamf Pro dashboard, on the Computers tab, click Smart Computer Groups and then click + New.
  2. On the Computer Group tab, enter a name such as “macOS Big Sur Computers”.
  3. Click the Criteria tab and set the following criteria:
    • Criteria: Operating System
    • Operator: like
    • Value: 11
  4. Save the smart computer group.
  5. On the Jamf Pro dashboard, on the Computer tab, click Smart Computer Groups and then click + New.
  6. On the Computer Group tab, enter a name such as “Carbon Black App Control Settings”.
  7. Click the Criteria tab and set the following criteria:
    • Criteria: Profile Name
    • Operator: Has
    • Value: Click the … menu and select the Carbon Black App Control Settings – System Extension Configuration Profile.
  8. Save the smart computer group.
  9. For the configuration profile, assign the “macOS Big Sur computers” smart computer group to the scope.
  10. For the policy, assign the “Carbon Black App Control Settings” smart computer group to the scope.

    After the smart computer groups are assigned, deployment begins.

    Important:

    If deploying the Kernel Extension, you must approve it after it is installed in System Preferences>Security & Privacy. This is an Apple-imposed requirement. This approval is not required if deploying the System Extension.

    We recommend that you ask the user to approve this extension by using a notification in the deployment policy.