Skip to main content
Question

Code42 Full Disk Access Config Profile


Forum|alt.badge.img+5
  • Contributor
  • 45 replies

Hello, Does anyone have info on a config profile that automates Full Disk Access for Code42 apps? I need one that works for intel/M1 as well as Big Sur and Catalina.

5 replies

Forum|alt.badge.img+5
  • Author
  • Contributor
  • 45 replies
  • March 31, 2021

Update on this: I have a config profile for intel Macs that seems to be working. I used the info from this link: https://support.code42.com/Administrator/Cloud/Configuring/Grant_Code42_permissions_to_macOS_devices#Confirm_full_disk_access_status

Does anyone have info on how to get this to work in Big Sur/M1 Macs? I'll test, I don't expect it to work.....


Forum|alt.badge.img+26
  • Honored Contributor
  • 457 replies
  • April 1, 2021

The same configuration profile I created for Catalina appears to be working for Big Sur on Apple Silicon based Macs.

Category: Computer Level

Identifier:
com.backup42.desktop

Identifier Type:
Bundle ID

Code Requirement:
identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = "9YV9435DHD"

(Unselected Validate the Static Code Requirement)

App or Service:
SystemPolicyAllFiles Allow


Forum|alt.badge.img+5
  • Author
  • Contributor
  • 45 replies
  • April 2, 2021

Thanks! Funny enough, I got this going after I posted via PPPC Utility.


Forum|alt.badge.img+8
  • New Contributor
  • 21 replies
  • August 14, 2021
jhalvorson wrote:

The same configuration profile I created for Catalina appears to be working for Big Sur on Apple Silicon based Macs.

Category: Computer Level

Identifier:
com.backup42.desktop

Identifier Type:
Bundle ID

Code Requirement:
identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = "9YV9435DHD"

(Unselected Validate the Static Code Requirement)

App or Service:
SystemPolicyAllFiles Allow


You forgot to add the asterisks before and after the forward slash exists sections.

 

identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "9YV9435DHD"


Forum|alt.badge.img+26
  • Honored Contributor
  • 457 replies
  • August 16, 2021
evaldes wrote:

You forgot to add the asterisks before and after the forward slash exists sections.

 

identifier "com.backup42.desktop" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "9YV9435DHD"


@evaldes You are correct.  I looked again in our Jamf Pro console and the asterisks are there.  I don't know why they don't appear in the post from 04-01-2021


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings