Code42 Full Disk Access Config Profile

[kirkd]

Hello, Does anyone have info on a config profile that automates Full Disk Access for Code42 apps? I need one that works for intel/M1 as well as Big Sur and Catalina.

[kirkd]

Update on this: I have a config profile for intel Macs that seems to be working. I used the info from this link: https://support.code42.com/Administrator/Cloud/Configuring/Grant_Code42_permissions_to_macOS_devices#Confirm_full_disk_access_status

Does anyone have info on how to get this to work in Big Sur/M1 Macs? I'll test, I don't expect it to work.....

[jhalvorson]

The same configuration profile I created for Catalina appears to be working for Big Sur on Apple Silicon based Macs.

Category: Computer Level

Identifier:
com.backup42.desktop

Identifier Type:
Bundle ID

Code Requirement:
identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = "9YV9435DHD"

(Unselected Validate the Static Code Requirement)

App or Service:
SystemPolicyAllFiles Allow

[evaldes]

You forgot to add the asterisks before and after the forward slash exists sections.

identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "9YV9435DHD"

[jhalvorson]

@evaldes You are correct.  I looked again in our Jamf Pro console and the asterisks are there.  I don't know why they don't appear in the post from 04-01-2021

[kirkd]

Thanks! Funny enough, I got this going after I posted via PPPC Utility.