Question

Wacom Center PPPC

Forum|Forum|1 year ago
March 12, 2024
3 replies
97 views

PE14_2
Valued Contributor

Hi all, try to make an PPPC with the PPPC Utility for the Wacom Center but one thing wont work and that is the com.wacom in Accessibility what am I missing? I control click on the file for the exact location add in the Utility and upload it to Jamf. (Two other settings in Wacom works but this one keeps asking for the password)

thanks

wsmits
New Contributor
Forum|Forum|1 year ago
March 13, 2024

Hi,

This is a really difficult one and many have had to trouble getting this to work.

I think the one your missing for IOManager is SystemPolicyFiles and AppleEvents.

Note I have 7 apps with PPPC settings in my profile and below is a snippet (not the full working profile), showing all the services allowed for each of them which I hope helps.

<key>Services</key>

<dict>

<key>Accessibility</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.wacomtablet" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.FirmwareUpdater" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.TabletDriver" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.WacomTouchDriver" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.IOManager" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>AppleEvents</key>

<array>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.wacomtablet</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.IOManager</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>ListenEvent</key>

<array>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>SystemPolicyAllFiles</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Display-Settings" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Display-Settings</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.RemoveWacomTablet" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.RemoveWacomTablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

</dict>

wsmits
New Contributor
Forum|Forum|1 year ago
March 13, 2024

Hi,

This PPPC has been an issue for a few of us. For the IOManager I have SystemPolicyFiles and AppleEvents also.

In my Profile I have 7 app permissions and I have pasted a list of all the services being allowed in mine below but note this not the fully formatted installed profile.

<key>Services</key>

<dict>

<key>Accessibility</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>AppleEvents</key>

<array>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.wacomtablet</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.IOManager</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>ListenEvent</key>

<array>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>SystemPolicyAllFiles</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Display-Settings</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.RemoveWacomTablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

</dict>

PE14_2
Author
Valued Contributor
Forum|Forum|1 year ago
March 13, 2024

Update:

So if I manually add the "com.wacom.IOManager" the name is "com.wacom" in Accessibility, but if I change at Finder settings "Show all filename extensions" and then add manually "com.wacom.IOManager" into Accessibilty the name is correct in Accessibility but still need admins rights.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded