Deployment with Jamf Pro

The default Splashtop installer DMG must be packaged into a format that is deployable by Jamf Pro. This can be done with the Jamf Composer tool.

1. Please download these two files: Splashtop installer .dmg and the deploy_splashtop_streamer.sh script to your computer.
2. Navigate to the /private/tmp directory on a machine that is running Jamf Composer. 
   Within this directory, please make a new folder with one word and name it something to help keep track of the Splashtop files Ex. folder name "Streamer".
   
3. Drag and drop the two files we downloaded earlier, Splashtop installer .dmg and deploy_splashtop_streamer.sh into the folder we just created.
   
4. Open Jamf Composer on your machine, and log in if prompted. (If a window opens asking which method to use to create your package, please click cancel, we will be using the drag and drop method instead).
5. Drag and drop this folder into the sidebar of Composer under “Sources” and it should appear as one source.
6. Next, adjust the ownership and permissions of Streamer to match the Streamer folder we created by selecting the Streamer folder in the center window and using the gear icon and selecting “apply Permissions to Streamer and All Enclosed Items”
   
   
7. Click “Build as PKG” and choose where you would like the new package to be saved.

The deployable PKG needs to be moved into Jamf Pro to enable its use in a Computer Policy.  Here is a JAMF Pro reference doc: here.

1. Log in to Jamf Pro.
2. In the top-right corner of the page, click Settings.
   
3. In the “Computer Management” section, click Packages.
   
4. Click New.
   
5. Use the General panel to configure basic settings for the package, including the display name and category.
   Note: If you do not add the package to a category, Jamf Admin displays the package in blue text in the Unknown category.
6. Click Choose File.
7. Navigate to the folder where you saved the .PKG file,
8. Select the file and click "Choose for Upload".
9. Click the Options tab and configure additional settings for the package, including the priority.
 Packages with higher priority install first. Package priority defaults to "10". A package with a priority of "1" is deployed or uninstalled before other packages. Multiple packages with the same priority install in alphabetical order based on the package name.
   
10. Click Save.

The deployable PKG needs to be moved into Jamf Pro to enable it’s use in a Computer Policy.

1. Click Computers at the top of the page.
2. Click Policies.
3. Click New.
4. Use the General payload to configure basic settings for the policy, including the trigger and execution frequency. Below are examples.
   
   1. Display Name: Deploy Splashtop
   2. Enabled: Select Checkbox
   3. Category: Optional
   4. Trigger: Recurring Check-In
   5. Execution Frequency: Once Per Computer
      
5. Use the Packages tab to select your deployable Splashtop PKG.
   
   1. Click Configure.
   2. Find your Splashtop PKG and click Add.
   3. Ensure that Install is selected and click Save.
      
   4. Use the rest of the payloads to configure the tasks you want to perform. For an overview of each payload, see Policy Payload Reference.
6. Use the Files and Processes tab to execute a command that will trigger the installation script.
   
   1. Click Configure.
   2. Under Execute Command, paste the following:                                                                                 
      sudo sh /private/tmp/FOLDERNAME/deploy_splashtop_streamer.sh -i "/private/tmp/FOLDERNAME/Splashtop_Streamer_Mac_DEPLOY_INSTALLER_v3.4.4.0.dmg" -d XXXXXX  -w 0 -s 0                                                                                                      
      OR 2 commands:                                                                                                                               
      cd /private/tmp/FOLDERNAME
      ./deploy_splashtop_streamer.sh -i "./Splashtop_Streamer_Mac_DEPLOY_INSTALLER_v3.4.0.0.dmg" -d XXXXXX  -w 0 -s 0          
      NOTE:
      Substitute FOLDERNAME with the folder name you created earlier.
      Substitute XXXXXX with your Deployment Code.
      Substitute “Splashtop_Streamer_Mac_DEPLOY_INSTALLER_v3.4.4.0.dmg” with the appropriate installer .dmg and version number.
      
   3. Click Save.
      
7. Click the Scope tab and configure the scope of the policy to choose computers this should be installed on. If you intend to install this on all computers, you can choose “All Computers” from the drop down.
   
8. Click Save.

Note: Jamf can NOT automate allowing Accessibility, Screen Recording, and Microphone within the Security and Privacy settings. This would have to be manually allowed by the user. You can check out this guide to enable these permissions manually:
MacOS 10.15 Catalina/ 11 Big Sur, additional Security and Privacy requirements for Mac Streamer and Mac Business App
The guide below is only to automate the Full Disk Access permissions.
*For Streamer V3.4.4.0 and newer, you do not need to create a profile for Kernel extensions (Kernel extensions here refers to the Kernel extensions setting instead of kernel extensions in general) and can skip this portion. 
Jamf reference article: Whitelisting Kernel Extensions

1. Click Computers at the top of the page.
2. Click Configuration Profiles.
3. Click New.
4. Set Display name for the profile (Ex. Splashtop Streamer PPPC and Kernel Extensions).
   Optional: Set Category (Ex. Security and Restrictions).
5. Click Privacy Preferences Policy Control from the left hand side.
6. Click Configure.
7. Set Identifier: com.splashtop.Splashtop-Streamer
8. Set Code Requirement:
   
   identifier "com.splashtop.Splashtop-Streamer" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = CPQQ3AW49Y
9. Click Add.
10. Under "App or Service" select SystemPolicyAllFIles within the dropdown.
11. Click Save.
12. Click Add.
13. Under "App or Service" select Accessibility within the dropdown.
14. Click Save.
    
15. Click Approved Kernel Extensions from the left hand side.
16. Click Configure.
17. Set Display name: Splashtop Streamer
18. Set Team ID: CPQQ3AW49Y
19. Click the Scope tab and configure the scope of the policy to choose computers this should be installed on. If you intend to install this on all computers, you can choose “All Computers” from the drop down.
    
20. Click Save.