Skip to main content

Create Configuration Profiles (Endpoint Management Tools - Mac)

This article applies to: Endpoint Management Tools


This page is intended for IT support professionals. End users should contact local IT support.

Configuration Profiles are used to make setting changes for general and security related items (requires OS X 10.7 or later). Note that User-level profiles (see step 7 below) only work with computers bound to a directory service such as Cornell AD.

  1. Log into your JSS site at https://jssmgt.it.cornell.edu/<JSSInstance>
    replacing <JSSInstance> with your instance's name.
    For example, https://jssmgt.it.cornell.edu/limnology
  2. Click Computers.
  3. In the left nav, click Configuration Profiles.
  4. Click the blue plus sign icon to create a profile, or the blue up arrow icon to upload an existing .mobileconfig profile created by Apple's Profile Manager.
  5. Select Create a Configuration Profile, then click Continue.
  6. Enter or edit a Name, Description, and Site. (If no sites have been defined, you will not see this field. That's okay, just continue with the next step.)
  7. For Level, select the appropriate entry from the drop-down list.
    Computer level profiles are applied next time the scoped computers contact the JSS.
    User level profiles are installed at next login of the scoped users.
  8. Select one of the items from the list on the left (Passcode, Network, VPN, etc.). These are called Payloads. A description of the payload you select will be displayed.
  9. Click Configure, then configure the payload options as desired.
  10. As soon as you click Configure for a payload, you'll see the item in the left column change to read 1 Payload Configured. Each configuration profile should have only one payload. If you need to remove a payload, select that payload from the list on the left, then click the small minus sign at the upper-right of the form.
  11. When finished configuring the payload, click the Scope tab to assign computers or users.
    If you specify both computers and network segments, these are treated as "and" conditions.
  12. (optional) Click the Self Service tab to enable and configure settings to distribute this profile in Self Service. Refer to the Self Service section of the Managing Computers chapter in the Casper Suite Administrator's Guide for more help with this feature.
  13. Click Save when finished.

Was this page helpful?

Your feedback helps improve the site.

Comments?