Preparing for Enterprise MacOS App Distribution
MatthewShaver 270006C69M Visits (3678)
Exciting news is coming for MacOS management through MaaS360. Many of you have already heard of our addition of the MacOS app catalog, and the pre-release feedback from beta testers has been amazing. We're excited to mark this as GA in the near future, and help take MacOS management with MaaS360 to the next level.
If your organization needs the ability to manage applications that do not reside in the App Store (let's be honest, as detailed as it is, there are still an extraordinary number of useful enterprise applications that are hosted on websites instead), there are some pre-requisites that need to be filled in order to accomplish this.
First, your organization will need an Apple Developer account. This is because in order to deliver applications remotely to devices, and have the proper permissions to install them with little to no user interaction, there is a certificate needed to grant those permissions. The certificate, called a Developer ID Installer cert, can only be obtained via a developer account, and only by the Agent (I'll get to that in a moment.
To create the account, head to http
The Team agent is the only one that can generate the Developer ID installer, and there are 2 different ways to go about this.
Method 2: Via Developer Site
The same cert can also be created directly via the developer website, though this requires a few more steps, it won't take much longer, and the end result is the same. This is a great option if there isn't enough space for Xcode, or if the Team Agent is working remotely without access to the Xcode system.
Select Developer ID, next, then Developer ID Installer
Generate the CSR per the instructions. Open Keychain Access, in the Keychain Access Menu navigate to Certificate Assistant, and Request a Certificate from a Certificate Authority:
Getting the cert and preparing for the Catalog
In the developer console, the certs generated through Xcode or the developer site will show up in the console under Certificates, IDs, and Profiles. Make sure that the device type is set to MacOS (it is not the default view). Find the Developer ID Installer and download the cert. We need the .P12 format, and it will download to a .CER. The easiest way to change the format is to upload the .CER in to the Keychain. Find the cert in "My Certificates," right click, choose to export, and make sure to save in the .P12 format. Assign the cert a password and save.
The certificate is now ready for upload to MaaS360. You'll need to download the MaaS360 package installer through the MacOS app workflows, information on which can be found here