Jamf Pro

Requirements

• At least an account with Full Access and privileges to Configuration Profiles, Policies and Scripts

Configuration Profile

• A Configuration Profile is needed to activate and configure the App Catalog. There are two options:

  • Basic: Go to the App Catalog Customer Portal to get a Configuration Profile to get you started right away with basic settings including the Supporting Configuration Profiles

  • Custom: Read the documentation to create a custom (advanced) configuration profile to meet your requirements.

• When your Configuration Profile is ready, login on your Jamf Pro instance

• For Basic, go to Computers -> Configuration Profiles -> Upload

• For Custom, and go to Computers -> Configuration Profiles -> New

  • Provide a Name such as App Catalog Configuration

  • Select Application & Custom Settings -> External Applications -> Add -> Source -> Custom Schema -> Add Schema and upload the JSON Manifest below:

  • Set the Preference Domain to nl.root3.catalog

  • Populate Authorization field with the authorization provided by Root3 Support

  • Click Add/Remove properties and select the preference keys to include in the Configuration Profile

  • Populate the additional fields depending on your needs

• Select the tab Scope and scope the Configuration Profiles to users or devices and Save

Supporting Configuration Profiles

To fully enable the App Catalog, some additional profiles are needed such as a Notifications payload, a Managed Login Item payload and PPPC. Go to the following pages, create Configuration Profiles or download a provided example:

Granting User Notifications

Managed Login Item

Full Disk Access (PPPC)

To add the Configuration Profiles to Jamf Pro, follow these steps for each profile:

• When your Configuration Profile is ready, go to Computers -> Configuration Profiles -> Upload

• Select the .mobileconfig file

• Select the tab Scope and scope the Configuration Profiles to users or devices and Save

Install App Catalog

The easiest way to install App Catalog is by creating a Smart Computer Group and a Policy.

• Go to Computers -> Smart Computer Groups -> New

  • Display Name: Has App Catalog

  • Criteria:

    • Criteria Application Bundle ID

    • Operator: is

    • Value: nl.root3.catalog

• Go to Computers -> Policies -> New

  • Options:

    • General:

      • Display Name: Install App Catalog

      • Trigger: Recurring Check-in

      • Execution Frequency: Once every day

    • Files and Processes:

      • Execute Command:

        curl -sSL https://cdn.appcatalog.cloud/install_app_catalog.zsh | zsh

  • Scope:

    • Targets: All Managed Clients

    • Exclusions: Has App Catalog

Installing Apps

To install apps using Jamf Pro, you can create a simple Policy. Just copy the app’s Bundle Identifier from https://portal.appcatalog.cloud/catalog.

• Go to Computers -> Policies -> New

  • Options:

    • General:

      • Display Name: Install [App Name]

      • Trigger: Recurring Check-in

      • Execution Frequency: Once per computer

    • Files and Processes:

      • Execute Command:

        catalog -i BUNDLE_IDENTIFIER

Catalog Agent Last Updated - Extension Attribute

Using an Extension Attribute in Jamf Pro, you can read the date and time when the update schedule last ran. This can be very helpful for compliance and create reports. The App Catalog automatically submits an inventory update once the update schedule was completed to immediately get confirmation in Jamf Pro in the Extension Attribute.

• Download the Extension Attribute script above

• Go to the Jamf Pro -> Settings -> Computer management -> Extension attributes

• Click New

• Display Name: Catalog Agent Last Updated

• Data Type: Date

• Change Input Type to Script

• Paste the script and click Save

• Optionally add the EA as a column in the Inventory Display settings

🎉 That's it, you have successfully configured the App Catalog for Jamf Pro!