Documentation: Integrating Mimoto Agent with Jamf Pro MDM

Mimoto Continuous Verification on MacOS

Overview

Mimoto adds continuous verification of identity to MacOS systems managed through Jamf Pro. This integration allows admins to configure the installation and configuration of Mimoto on managed MacOS systems.

Overview of configuration steps

• From the Mimoto Console, gather the information and data necessary to install the Mimoto Agent via Jamf Pro MDM

• From Jamf Pro MDM, setup Mimoto’s information and data so that enrolled systems will be configured with Mimoto’s agent and report back to your Mimoto Console.

From your Mimoto Console, gather your Mimoto agent’s configuration information

Steps to collect your Mimoto’s Environment Agent keys

1. Go to your Mimoto Console, login 

2. Select or create an environment representing a group of systems to deploy mimoto-agent to

3. Select the Agents tab

4. Click on the “Environment Agent Keys” button

Steps to collect the Mimoto agent binary for distribution

1. Download the latest Mimoto agent binary with this link
   https://mimoto-agent-releases.s3.us-west-1.amazonaws.com/macos/mimoto-agent-mac-os-1.1.3.00-arm64.dmg

Summary

At this moment you gathered 3 piece of information needed to deploy a Mimoto agent via Jamf Pro MDM:

1. Access Key

2. Secret Key

3. Mimoto agent binary 

From your Jamf Pro MDM, integrate the Mimoto agent to your deployment steps

Steps to setup the Mimoto agent binary installer for deployment

1. Log in to your Jamf Pro MDM

2. On the left panel, select Settings, then Computer Management tab

3. First setting available is Packages, click

4. On the top right, click the “+ New” button 

5. Fill out information including uploading the installer

   1. Tab General
      Add a Display name, and upload the Mimoto agent binary obtained earlier 

   2. Tab Options if any

Tab Limitations if any

Steps to setup a Policy so that enrolled computers receive and configure your Mimoto agent

1. Log in to your Jamf Pro MDM

2. On the left panel, select Computers

3. In the next panel, in the Content Management section, click Policies

4. Create a new Policy by clicking the “+ New” button

5. You need to configure both the General section and the Packages section
   Note: listed here is the minimum set of items to configure, more can be configured depending on your own deployment policies and practices

   1. Click General, you are in the Options tab

      1. Add a “Display Name”

      2. Check Enabled

      3. For the trigger, check “Enrollment Complete” (ie mimoto installation happens right after the enrollment process is completed)

      4. Execution Frequency is “Once per computer” (it does retry if it fails)

      5. If you need manage limitations of date/time, add as needed

   2. Click Scope tab

      1. Switch to the “Scope” tab

      2. Target Computers set to All Computers

      3. Target Users set to All Users

   3. Go back to the Options tab, click Packages from the sub left panel

      1. Configure

      2. Find your package (using version is a good unique identifier in the name), click the Add button on the right

      3. Distribution point is as per your company’s policy, Cloud distribution point is a generic choice

      4. Action is Install

      5. Click Save at the bottom right corner

Summary

Your Jamf Pro MDM has a Policy that contains

1. The Mimoto agent binary to deploy

2. Your Mimoto Environment Access Key/Secret Key so that the agent can report back to your Mimoto Console Environment

References

• Jamf Pro Policies (Jamf Pro Policy documentation)

Policy configuration (Jamf Pro Policy deployment documentation)