Add Security & Privacy Profile

Having covered the difference between a profile targeting the whole device or the specific user, you'll now create a device profile to manage Security and Privacy features within macOS.  In this specific example, you'll configure the software update delay and Gatekeeper settings.

1. Add a macOS Device Profile

Add a macOS Device Profile

In the Workspace ONE UEM console:

  1. Select Devices
  2. Select Profiles & Resources
  3. Select Profiles
  4. Select Add
  5. Select Add Profile

2. Select Profile Platform

Select Profile Platform

Select the macOS icon.

3. Select the Profile Context

Select the Profile Context

Select the Device Profile icon.

4. Profile General Settings

  1. Select General if it is not already selected.
  2. Enter macOS Security Privacy for the profile name.
  3. Select Auto for the Assignment Type.
  4. Scroll down to view the Smart Groups field, and click in the search box. This will pop-up the list of created Smart Groups. Enter All Devices and select the All Devices ([email protected]) group.

5. Configure Security and Privacy Payload

  1. Enter Security in the Profile search bar.
  2. Select Security & Privacy.
  3. Click Configure.

6. Review Security and Privacy Payload Settings

  1. Select the Delay Updates check box
  2. Set the delay to 90 days
  3. Select Mac App Store and Identified developers
  4. Check the box for Do not allow user to override Gatekeeper setting

Note: The delay starts from the day the update is released. For example, if Apple publishes an update and the device is offline for the first 30 days the update is released, a 90-day update delay period would end 60 days later (even though technically the device has only known about the update for 60 days).  

7. Publish the Profile

Click Publish.

8. Review Security and Privacy Settings

Return to the enrolled macOS device:

  1. Click the Apple logo
  2. Click System Preferences
  3. Click Security & Privacy

9. Review Gatekeeper Settings

  1. Click General
  2. Click the lock to make changes
  3. Enter VMware1! as the administrator password
  4. Click Unlock
  5. Note you're still unable to make changes to the Gatekeeper settings as these are controlled by Workspace ONE UEM.


Add your comment

E-Mail me when someone replies to this comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.