How To Create A Plist

Jamf Pro is an MDM solution that administrators use to configure Compliance Reporter settings and deploy Compliance Reporter to target computers.

You can use a preferred text editor to configure settings for Compliance Reporter in PLIST or .mobileconfig file, and then upload the file to Jamf Pro for deployment to target computers.

In Jamf Pro, click Computers at the top of the sidebar.
Click Configuration Profiles in the sidebar.
Click New .
Use the General payload to configure basic settings, including the level at which to apply the profile and the distribution method.

Only payloads and settings that apply to the selected level are displayed for the profile.

To distribute the profile during enrollment using a computer PreStage enrollment, ensure you create a computer-level configuration profile.
Click the Application & Custom Settings payload.
Click Upload.
Click + Add.

Do one of the following:

To use a PLIST, enter com.jamf.compliancereporter in the Preference Domain field, and then enter a PLIST like the following in the Property List field:

                        <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict>   <key>AuditLevel</key>   <integer>1</integer>   <key>LogFileMaxNumberBackups</key>   <integer>10</integer>   <key>LogFileLocation</key>   <string>/var/log/JamfComplianceReporter.log</string>   <key>LogFileMaxSizeMegaBytes</key>   <integer>10</integer>   <key>FileEventUseFuzzyMatch</key>   <false/>   <key>FileEventInclusionPaths</key>   <array>     <string>/Users/.*</string>   </array>   <key>FileEventExclusionPaths</key>   <array>     <string>/Users/.*/Library/.*</string>   </array>   <key>LogFilePermission</key>   <string>640</string>   <key>LogFileOwnership</key>   <string>root:wheel</string>   <key>AuditEventLogVerboseMessages</key>   <false/>   <key>AuditEventExcludedUsers</key>   <array>     <string>_spotlight</string>     <string>_windowserver</string>   </array>   <key>AuditEventExcludedProcesses</key>   <array>     <string>/usr/bin/log</string>     <string>/usr/sbin/syslogd</string>   </array>   <key>LogRemoteEndpointEnabled</key>   <true/>   <key>LogRemoteEndpointURL</key>   <string>server.company.com:PORT</string>   <key>LogRemoteEndpointType</key>   <string></string>   <key>LogRemoteEndpointKafka</key>   <dict>     <key>TLSServerCertificate</key>     <string></string>     <key>TLSClientPrivateKey</key>     <string></string>     <key>TLSClientCertificate</key>     <string></string>     <key>TopicName</key>     <string>compliancereporter</string>   </dict>   <key>LogRemoteEndpointREST</key>   <dict>     <key>PublicKeyHash</key>     <string>e838SOLK9Yu+brDTxM4s0HatE2UdoEmRSBtNDU=</string>   </dict>   <key>LogRemoteEndpointTLS</key>   <dict>     <key>TLSServerCertificate</key>     <string></string>   </dict>   <key>SyslogFormatEnabled</key>   <false/>  </dict> </plist>

To upload a configuration profile with the Compliance Reporter settings, click Upload to upload a .mobileconfig file like the following:

                        <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">     <dict>         <key>PayloadContent</key>         <array>             <dict>                 <key>PayloadContent</key>                 <dict>                     <key>com.jamf.compliancereporter</key>                     <dict>                         <key>Forced</key>                         <array>                             <dict>                                 <key>mcx_preference_settings</key>                                 <dict>                                     <key>AuditEventExcludedProcesses</key>                                     <array>                                         <string>/usr/sbin/mDNSResponder</string>                                         <string>/usr/sbin/syslogd</string>                                         <string>/Applications/splunk/bin/splunk-optimize</string>                                     </array>                                     <key>AuditEventExcludedUsers</key>                                     <array>                                         <string>_spotlight</string>                                         <string>_windowserver</string>                                     </array>                                     <key>AuditEventLogVerboseMessages</key>                                     <false />                                     <key>AuditLevel</key>                                     <integer>AUDIT_LEVEL</integer>                                     <key>LicenseEmail</key>                                     <string>LICENSE_EMAIL</string>                                     <key>LicenseExpirationDate</key>                                     <string>LICENSE_DATE</string>                                     <key>LicenseKey</key>                                     <string>LICENSE_KEY</string>                                     <key>LicenseType</key>                                     <string>LICENSE_TYPE</string>                                     <key>LicenseVersion</key>                                     <string>1</string>                                     <key>LogFileMaxNumberBackups</key>                                     <integer>10</integer>                                     <key>LogFileMaxSizeMegaBytes</key>                                     <string>50</string>                                     <key>LogFileOwnership</key>                                     <string>root:wheel</string>                                     <key>LogFilePermission</key>                                     <string>644</string>                                     <key>LogRemoteEndpointAWSKinesis</key>                                     <dict>                                         <key>AccessKeyId</key>                                         <string></string>                                         <key>Region</key>                                         <string>us-east-1</string>                                         <key>SecretKey</key>                                         <string></string>                                         <key>StreamName</key>                                         <string></string>                                     </dict>                                     <key>LogRemoteEndpointEnabled</key>                                     <true />                                     <key>LogRemoteEndpointKafka</key>                                     <dict>                                         <key>TLSClientCertificate</key>                                         <string>cert_common_name</string>                                         <key>TLSClientPrivateKey</key>                                         <string>cert PEM string</string>                                         <key>TLSServerCertificate</key>                                         <string>cert_common_name</string>                                         <key>TopicName</key>                                         <string>complianceReporter</string>                                     </dict>                                     <key>LogRemoteEndpointREST</key>                                     <dict>                                         <key>PublicKeyHash</key>                                         <string></string>                                         <key>Username</key>                                         <string></string>                                         <key>Password</key>                                         <string></string>                                     </dict>                                     <key>LogRemoteEndpointSyslog</key>                                     <dict>                                         <key>TLSServerCertificate</key>                                         <array>                                             <string></string>                                         </array>                                     </dict>                                     <key>LogRemoteEndpointTLS</key>                                     <dict>                                         <key>TLSServerCertificate</key>                                         <array>                                             <string>common_name</string>                                         </array>                                     </dict>                                     <key>LogRemoteEndpointType</key>                                     <string></string>                                     <key>LogRemoteEndpointURL</key>                                     <string></string>                                     <key>UnifiedLogPredicates</key>                                     <array>                                         <string>(subsystem == "com.apple.AccountPolicy")</string>                                     </array>                                     <key>ProhibitedApps</key>                                     <dict>                                         <key>PAExecutableNames</key>                                         <array>                                             <string></string>                                         </array>                                         <key>PASigningIdentifiers</key>                                         <array>                                             <string>com.apple.Chess</string>                                         </array>                                         <key>PATeamIdentifiers</key>                                         <array>                                             <string></string>                                         </array>                                     </dict>                                     <key>PlaintextLogCollectionPaths</key>                                     <array>                                         <string>/var/log/jamf.log</string>                                     </array>                                 </dict>                             </dict>                         </array>                     </dict>                 </dict>                 <key>PayloadDescription</key>                 <string></string>                 <key>PayloadDisplayName</key>                 <string>Custom</string>                 <key>PayloadEnabled</key>                 <true />                 <key>PayloadIdentifier</key>                 <string>ACE8C1E0-2CA9-47F9-95EA-092964CAB3EE</string>                 <key>PayloadOrganization</key>                 <string>Jamf Compliance Reporter</string>                 <key>PayloadType</key>                 <string>com.apple.ManagedClient.preferences</string>                 <key>PayloadUUID</key>                 <string>ACE8C1E0-2CA9-47F9-95EA-092964CAB3EE</string>                 <key>PayloadVersion</key>                 <integer>1</integer>             </dict>         </array>         <key>PayloadDescription</key>         <string></string>         <key>PayloadDisplayName</key>         <string>Example Compliance Reporter Preferences</string>         <key>PayloadEnabled</key>         <true />         <key>PayloadIdentifier</key>         <string>8ECC25AC-0DAB-40D1-8E9F-2A7275315FDA</string>         <key>PayloadOrganization</key>         <string>Compliance Reporter inc</string>         <key>PayloadRemovalDisallowed</key>         <true />         <key>PayloadScope</key>         <string>System</string>         <key>PayloadType</key>         <string>Configuration</string>         <key>PayloadUUID</key>         <string>8ECC25AC-0DAB-40D1-8E9F-2A7275315FDA</string>         <key>PayloadVersion</key>         <integer>1</integer>     </dict> </plist>

Click theScope tab and configure the scope of the profile.
To distribute the profile during enrollment using a computer PreStage enrollment, ensure the scope of the profile contains the computers that are in the scope of the PreStage enrollment.
Click Save .