Skip to main content
Solved

App deployment with no user interaction - not able to get PPPC correctly

  • November 1, 2022
  • 4 replies
  • 27 views
E
Forum|alt.badge.img+6

Hello everyone.

I am deploying Snapcomms, a screensaver-type application to be used by our communications department. The pacakge is installed successfully, but it needs access to PPPC settings. 

I am using the command codesign -dr - /Applications/Snap\\ Client.app to get information about what settings to utilize. These are the settings I got:

 

However, the deployment errors with this message:

In the payload (UUID: EF17794A-9081-4D7B-944F-EAA52BDA761F), the key 'CodeRequirement' has an invalid value.
I contacted the company's support, but we don't have any new information yet.

I am looking for suggestions in case someone has already deployed Snapcomms with Jamf or suggestions about troubleshooting this issue.

Regards!

Best answer by Keith_L

The format should be as such:-

anchor apple generic and identifier "com.snapcomms.osx.SnapClient" and (certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "NSTXJ25X53")

    4 replies

    K
    Forum|alt.badge.img+6
    • Keith_L
    • Contributor
    • 24 replies
    • Answer
    • November 2, 2022

    The format should be as such:-

    anchor apple generic and identifier "com.snapcomms.osx.SnapClient" and (certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "NSTXJ25X53")

    AJPinto
    Forum|alt.badge.img+26
    • AJPinto
    • Legendary Contributor
    • 2802 replies
    • November 2, 2022

    Absolutely learn how to do things the long way first, but formatting on the code requirement can be a bit annoying. I found a tool some time back that gives you all this in a text dump, along with an icon you can upload to JAMF.

     

    HCS Technology Group - Show Me Your ID 2.0 (hcsonline.com)

    E
    Forum|alt.badge.img+6
    • esantos
    • Author
    • Contributor
    • 14 replies
    • November 2, 2022

    The format should be as such:-

    anchor apple generic and identifier "com.snapcomms.osx.SnapClient" and (certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "NSTXJ25X53")


    Keith,

    Yes, after using you CodeRequirement suggestion I don't see the error any longer. I appreciate your help. 👏

    E
    Forum|alt.badge.img+6
    • esantos
    • Author
    • Contributor
    • 14 replies
    • November 2, 2022

    Absolutely learn how to do things the long way first, but formatting on the code requirement can be a bit annoying. I found a tool some time back that gives you all this in a text dump, along with an icon you can upload to JAMF.

     

    HCS Technology Group - Show Me Your ID 2.0 (hcsonline.com)


    Thanks for the reference. I run this tool and it does provide clear information that I can use to set up PPPC profiles to deploy. Didn't do the trick for Snapcomms but sure will be useful in the future.
    Thanks!


    Terms & ConditionsCookie settingsAccessibility statement