Deploying 1E Client using Jamf

To deploy the 1E Client and take full advantage of its functionality, you will need to grant it the following permissions:

• Full Disk Access.

• AXM Web Configuration.

• Accessibility and Notifications Access (Interaction Client UI).

These permissions can be granted to the 1E Client using macOS Configuration Profiles created using Jamf. This article contains steps to create Configuration Profiles with Display Names and Descriptions to suit your organization.

Full disk access

To create a Configuration Profile for full disk access using Jamf:

1. Open the Jamf Pro web console.

2. Navigate to Computers > Configuration Profiles.

3. Click New.

   

4. Complete these fields as shown:

   1. Name: 1E Client.

   2. Description: 1E Client-Privacy Preferences Policy Control.

      

5. Choose the option Privacy Preferences Policy Control from the Sidebar.

6. Configure these fields as shown:

   1. Identifier: com.1e.Client

   2. Identifier Type: Bundle ID

   3. Code Requirement:

      Copy

      anchor apple generic and identifier "com.1e.Client" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = C72FZX84NH)

      

7. Click + Add.

8. Configure the Payload to allow SystemPolicyAllFiles.

9. Click the Add button and select SystemPolicyAllFiles from the drop down menu.

10. Set Access as Allow and click Save.

11. Save the Configuration Profile.

12. Define the scope of this profile Deployment as needed.

AXM web configuration

The following permission is needed for AXM monitoring to work.

1. Open the JAMF Pro web console.

2. Navigate to Computers > Configuration Profiles.

3. Click New.

4. Complete these fields as shown:

   1. Name: 1E Web Plugin.

   2. Description: Configuration for 1E AXM Web Plugin.

      

5. Select Payload Configuration for Application and Custom Settings > Upload

6. Click the + Add.

7. Complete these fields as shown:

   1. Preference Domain: com.google.Chrome

   2. Property List:

      Copy

      <?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
      <plist version="1.0">
        <dict>
          <key>ExtensionInstallAllowlist</key>
          <array>
            <string>ceiaibmchnpfjpehgahbnefnchamhgop</string>
          </array>
          <key>ExtensionInstallForcelist</key>
          <array>
            <string>ceiaibmchnpfjpehgahbnefnchamhgop;http://localhost:7781/axm/web/extension.xml</string>
          </array>
          <key>ExtensionInstallSources</key>
          <array>
            <string>http://localhost:7781/*</string>
          </array>
        </dict>
      </plist>

      

8. Click the + Add.

9. Complete these fields as shown:

   1. Preference Domain: com.microsoft.Edge

   2. Property List:

      Copy

      <?xml version="1.0" encoding="UTF-8"?>
      <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
      <plist version="1.0">
        <dict>
          <key>ExtensionInstallAllowlist</key>
          <array>
            <string>ceiaibmchnpfjpehgahbnefnchamhgop</string>
          </array>
          <key>ExtensionInstallForcelist</key>
          <array>
            <string>ceiaibmchnpfjpehgahbnefnchamhgop;http://localhost:7781/axm/web/extension.xml</string>
          </array>
          <key>ExtensionInstallSources</key>
          <array>
            <string>http://localhost:7781/*</string>
          </array>
        </dict>
      </plist>

      

10. Define the scope of this profile Deployment as required.

Accessibility and Notifications

To create a Configuration Profile for Accessibility using Jamf, follow these steps:

1. Open the Jamf Pro web console.

2. Navigate to Computers > Configuration Profiles.

3. Click New.

4. Enter the profile creation details as shown:

   • Name: 1E Client Interaction.

   • Description: 1E Client Interaction Accessibility and Notifications Permissions.

5. Choose the option Privacy Preferences Policy Control from the sidebar.

   • Enter the following details:

   • Identifier: com.1e.Client.Interaction.

   • Identifier Type: Bundle ID.

   • Code Requirement:

     Copy

     anchor apple generic and identifier "com.1e.Client.Interaction" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = C72FZX84NH)

6. Click the Add(+) Icon.

7. Select Accessibility from the drop-down menu.

8. Set Access as Allow and click Save.

9. Now move to the Notifications section in the same list, in the left pane.

10. Enter the following:

    • App Name as 1E.Client.Interaction

    • Bundle Id as com.1e.Client.Interaction

11. Select the permissions as shown in the following image:

    

12. Save the Configuration Profile.

13. Define the scope of this profile deployment as needed.

    

Sample Jamf profiles

The following sample profiles were created using the steps outlined in this article, you can download and uploaded them in your Jamf Pro Portal.

• 1E Client.mobileconfig

• 1E Web Plugin.mobileconfig

• 1E Client Interaction.mobileconfig