Skip to main content
Question

Disable Certificate Transparency enforcement for a list of URLs

  • August 2, 2022
  • 3 replies
  • 11 views

Forum|alt.badge.img+5

Hi,

I was just wondering if anyone has had any experience with this and would be able to guide me in the right direction to deploy this.  Any help would be appreciated. 

https://chromeenterprise.google/policies/#CertificateTransparencyEnforcementDisabledForUrls

3 replies

Forum|alt.badge.img+5
  • Author
  • Contributor
  • 26 replies
  • August 2, 2022

would it be a plist file I create under custom settings that look like this

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key> 
CertificateTransparencyEnforcementDisabledForUrls
</key>
<false/>

 

<array>
<string>example.com</string>
<string>.example.com</string>
</array>
</dict>
</plist>

talkingmoose
Forum|alt.badge.img+36
  • Community Manager
  • 1913 replies
  • August 2, 2022

Consider using a Jamf manifest to make this easier.

There’s one available here:
https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManagedPreferencesApplications/com.google.Chrome.json

You can find instructions for using it here:
https://github.com/Jamf-Custom-Profile-Schemas/jamf-manifests/wiki

I suggest adding it to your new configuration profile and then immediately remove all the automatically enabled properties. Then add back only what you need.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • 26 replies
  • August 4, 2022

Thank you.