Wacom Center PPPC | Community

Hi all, try to make an PPPC with the PPPC Utility for the Wacom Center but one thing wont work and that is the com.wacom in Accessibility what am I missing? I control click on the file for the exact location add in the Utility and upload it to Jamf. (Two other settings in Wacom works but this one keeps asking for the password)

thanks

Page 1 / 1

Hi,

This is a really difficult one and many have had to trouble getting this to work.

I think the one your missing for IOManager is SystemPolicyFiles and AppleEvents.

Note I have 7 apps with PPPC settings in my profile and below is a snippet (not the full working profile), showing all the services allowed for each of them which I hope helps.

<key>Services</key>

<dict>

<key>Accessibility</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.wacomtablet" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.FirmwareUpdater" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.TabletDriver" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.WacomTouchDriver" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.IOManager" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>AppleEvents</key>

<array>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.wacomtablet</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.IOManager</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>ListenEvent</key>

<array>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>SystemPolicyAllFiles</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Display-Settings" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Display-Settings</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.RemoveWacomTablet" and (certificate leafafield.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1 field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leafafield.1.2.840.113635.100.6.1.13] /* exists */ and certificate leafasubject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.RemoveWacomTablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

</dict>

Hi,

This PPPC has been an issue for a few of us. For the IOManager I have SystemPolicyFiles and AppleEvents also.

In my Profile I have 7 app permissions and I have pasted a list of all the services being allowed in mine below but note this not the fully formatted installed profile.

<key>Services</key>

<dict>

<key>Accessibility</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.wacomtablet" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.FirmwareUpdater" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.TabletDriver" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.WacomTouchDriver" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.IOManager" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>AppleEvents</key>

<array>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.wacomtablet</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<string>identifier "com.apple.systempreferences" and anchor apple</string>

<key>AEReceiverIdentifier</key>

<string>com.apple.systempreferences</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>AEReceiverCodeRequirement</key>

<key>AEReceiverIdentifier</key>

<string>com.wacom.IOManager</string>

<key>AEReceiverIdentifierType</key>

<string>bundleID</string>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>ListenEvent</key>

<array>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Authorization</key>

<string>AllowStandardUserToSetSystemService</string>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

<key>SystemPolicyAllFiles</key>

<array>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.wacomtablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.FirmwareUpdater</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.Wacom-Desktop-Center</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.TabletDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.WacomTouchDriver</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<key>Identifier</key>

<string>com.wacom.IOManager</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.Wacom-Display-Settings" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.Wacom-Display-Settings</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

<dict>

<key>Allowed</key>

<key>CodeRequirement</key>

<string>anchor apple generic and identifier "com.wacom.RemoveWacomTablet" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)</string>

<key>Identifier</key>

<string>com.wacom.RemoveWacomTablet</string>

<key>IdentifierType</key>

<string>bundleID</string>

<key>StaticCode</key>

</dict>

</array>

</dict>

Update:

So if I manually add the "com.wacom.IOManager" the name is "com.wacom" in Accessibility, but if I change at Finder settings "Show all filename extensions" and then add manually "com.wacom.IOManager" into Accessibilty the name is correct in Accessibility but still need admins rights.

Reply

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded