{"id":75776,"date":"2023-05-24T16:55:02","date_gmt":"2023-05-24T20:55:02","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75776"},"modified":"2023-08-09T09:13:01","modified_gmt":"2023-08-09T13:13:01","slug":"create-mac-or-ios-mdm-custom-configuration-profile-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy","title":{"rendered":"Create a Mac or iOS MDM Custom Configuration Profile Policy"},"content":{"rendered":"\n<p>JumpCloud policies can help you customize, manage, and secure macOS or iOS devices that are enrolled in MDM. If you need a policy that isn\u2019t available as a ready-to-use policy in the JumpCloud Admin Portal, you can create an MDM custom configuration profile policy to help you distribute payloads and policies to devices.<\/p>\n\n\n\n<p>A custom configuration profile is an XML file with an extension of .<em>mobileconfig<\/em>. You can use GUI tools like&nbsp;<a target=\"_blank\" href=\"https:\/\/itunes.apple.com\/us\/app\/apple-configurator-2\/id1037126344?mt=12\" rel=\"noreferrer noopener\">Apple Configurator 2<\/a>&nbsp;or&nbsp;<a target=\"_blank\" href=\"https:\/\/imazing.com\/profile-editor\" rel=\"noreferrer noopener\">iMazing Profile Editor<\/a>, or a manual tool like&nbsp;<a target=\"_blank\" href=\"https:\/\/developer.apple.com\/business\/documentation\/Configuration-Profile-Reference.pdf\" rel=\"noreferrer noopener\">Apple\u2019s Configuration Profile Reference<\/a>&nbsp;to create the custom configuration profile. To see available payloads you can include in a configuration profile, use the&nbsp;<a target=\"_blank\" href=\"https:\/\/mosen.github.io\/profiledocs\/\" rel=\"noreferrer noopener\">Profile Reference Documentation<\/a>&nbsp;maintained by the MacAdmins community.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Prerequisites<\/strong><\/h2>\n\n\n\n<ul>\n<li>MDM is configured for your organization. For more information, see <a href=\"https:\/\/jumpcloud.com\/support\/set-up-apple-mdm\">Manage Apple Devices with MDM<\/a>.<\/li>\n\n\n\n<li>Your devices are enrolled in MDM. <\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Considerations<\/strong><\/h2>\n\n\n\n<ul>\n<li>The custom MDM configuration profile is&nbsp;automatically installed to all users on a device.&nbsp;JumpCloud signs the custom configuration profiles that are uploaded to the policy&nbsp;and modifies the following attributes within the profile:<\/li>\n\n\n\n<li>PayloadIdentifier<\/li>\n\n\n\n<li>PayloadUUID<\/li>\n\n\n\n<li>PayloadRemovalDisallowed<\/li>\n\n\n\n<li>MacOS devices with M1 chips require additional considerations if you are deploying kernel extensions as part of a custom MDM profile .<em>mobileconfig<\/em>&nbsp;payload. See&nbsp;<a target=\"_blank\" href=\"https:\/\/support.apple.com\/guide\/mac-help\/change-startup-disk-security-settings-a-mac-mchl768f7291\/mac\" rel=\"noreferrer noopener\">Apple&#8217;s Documentation<\/a>&nbsp;and consider using system extensions instead.<\/li>\n<\/ul>\n\n\n\n<p><strong>To create a macOS or iOS MDM Custom Configuration Profile policy<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login.\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>In the&nbsp;<strong>All<\/strong>&nbsp;tab, click (<strong>+<\/strong>).<\/li>\n\n\n\n<li>On the New Policy panel, select the&nbsp;<strong>Mac<\/strong>&nbsp;or&nbsp;<strong>iOS<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Select <strong>MDM Custom Configuration Profile<\/strong> from the list, then click <strong>configure<\/strong>.<\/li>\n\n\n\n<li>(Optional) Edit the <strong>Policy Name<\/strong>&nbsp;to enter a new&nbsp;name for the custom configuration profile policy or keep the default.&nbsp;<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, click&nbsp;<strong>upload file<\/strong>.&nbsp;<\/li>\n\n\n\n<li>Select the&nbsp;<code>.mobileconfig<\/code>&nbsp;file you want to upload and click&nbsp;<strong>Open<\/strong>.&nbsp;<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The&nbsp;<code>.mobileconfig<\/code>&nbsp;file lets you upload and distribute MDM custom configuration profiles to macOS or iOS devices that are enrolled in JumpCloud MDM.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"599\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg\" alt=\"\" class=\"wp-image-95549\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-300x176.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-768x449.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1536x899.jpg 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-2048x1199.jpg 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol start=\"9\">\n<li>(Optional) Select the&nbsp;<strong>Device Groups<\/strong>&nbsp;tab, then select one or more device groups on which to apply the policy.<\/li>\n\n\n\n<li>(Optional) Select the&nbsp;<strong>Devices<\/strong>&nbsp;tab, then select one or more devices on which to apply the policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>JumpCloud policies can help you customize, manage, and secure macOS or iOS devices that are enrolled in MDM. If you [&hellip;]<\/p>\n","protected":false},"author":201,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852,2995,3082],"support_tag":[],"coauthors":[2835],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Create a Mac or iOS MDM Custom Configuration Profile Policy - JumpCloud<\/title>\n<meta name=\"description\" content=\"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create a Mac or iOS MDM Custom Configuration Profile Policy\" \/>\n<meta property=\"og:description\" content=\"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-09T13:13:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"alexsnyder\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy\",\"name\":\"Create a Mac or iOS MDM Custom Configuration Profile Policy - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg\",\"datePublished\":\"2023-05-24T20:55:02+00:00\",\"dateModified\":\"2023-08-09T13:13:01+00:00\",\"description\":\"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-scaled.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-scaled.jpg\",\"width\":2560,\"height\":1498},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create a Mac or iOS MDM Custom Configuration Profile Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Create a Mac or iOS MDM Custom Configuration Profile Policy - JumpCloud","description":"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy","og_locale":"en_US","og_type":"article","og_title":"Create a Mac or iOS MDM Custom Configuration Profile Policy","og_description":"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.","og_url":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy","og_site_name":"JumpCloud","article_modified_time":"2023-08-09T13:13:01+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"alexsnyder"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy","url":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy","name":"Create a Mac or iOS MDM Custom Configuration Profile Policy - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-1024x599.jpg","datePublished":"2023-05-24T20:55:02+00:00","dateModified":"2023-08-09T13:13:01+00:00","description":"Create a custom Mac MDM configuration profile policy to help you distribute payloads and policies to devices.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-scaled.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/mdm-custom-config-profile-policy-scaled.jpg","width":2560,"height":1498},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-mac-or-ios-mdm-custom-configuration-profile-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create a Mac or iOS MDM Custom Configuration Profile Policy"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75776"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/201"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75776\/revisions"}],"predecessor-version":[{"id":95551,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75776\/revisions\/95551"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75776"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75776"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75776"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}