Skip to content

Commit

Permalink
chore: minor text adjustments regarding MDM and FDA (#45)
Browse files Browse the repository at this point in the history
  • Loading branch information
galex505 authored Jan 10, 2025
1 parent e550835 commit 2354b38
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions appendix/mdm-fulldiskaccess.rst
Original file line number Diff line number Diff line change
Expand Up @@ -3,26 +3,26 @@
Full Disk Access for macOS asgard2-agent-service via MDM
========================================================

To create an appropriate profile, to push ``Full Disk Access`` via MDM, you have to retrieve the ``codesign`` from ``asgard2-agent-service``.
To create an appropriate profile, to push ``Full Disk Access`` (FDA) via MDM, you have to retrieve the ``codesign`` from ``asgard2-agent-service``.

To do this, execute the following command in terminal:

.. code-block:: console
MacBook-Pro:~ nextron$ sudo -s
MacBook-Pro:~ nextron$ codesign -dr - /private/var/lib/asgard2-agent/asgard2-agent-service
MacBook-Pro:~ nextron$ sudo -s
MacBook-Pro:~ nextron$ codesign -dr - /private/var/lib/asgard2-agent/asgard2-agent-service
Executable=/private/var/lib/asgard2-agent/asgard2-agent-service
designated => identifier "client-arm64" and anchor apple generic and certificate ...
You have to copy the output, starting from ``identifier`` in your MDM profile in the related field.

.. note::
Please be aware, that setting the ``Full Disk Access`` via MDM will not result in listing the granted access in the ``System Settings`` of macOS.
The only way to check if everything is correct is to execute in terminal:
A way to check, if the settings of your remote deployment have been applied, is to execute in Terminal (temporarily FDA for Terminal is required for this):

.. code-block:: console
MacBook-Pro:~ nextron$ /usr/libexec/PlistBuddy -c "print" /Library/Application Support/com.apple.TCC/MDMOverrides.plist
MacBook-Pro:~ nextron$ /usr/libexec/PlistBuddy -c "print" "/Library/Application Support/com.apple.TCC/MDMOverrides.plist"
You can create the mobileconfig file by using the PPPC utility from JAMF: https://github.com/jamf/PPPC-Utility

Expand Down

0 comments on commit 2354b38

Please sign in to comment.