Deploying PhishID with Jamf Pro

Overview

This article covers deployment of the PIXM browser extensions on an organization’s Jamf Pro managed Mac devices. The extension deployment covers Chrome, Firefox and Safari browsers. The deployment will require access to the below files, which you should confirm before proceeding.

• PixmMacInstaller_0.1.0.8.pkg
• PixmMacUninstaller_0.1.0.8.pkg
• Profile for Pixm Chrome Extension Prod
• Profile for Pixm Firefox Extension Prod

The first three sections cover deployment of the PixmMacInstaller. This includes uploading the installer file to Jamf Pro, creating a Smart Group to track which Mac devices the installer deploys to, and the deployment step itself. The following three sections cover the deployment of the PIXM browser extensions to Chrome, Firefox, and Safari browsers, respectively. Please note: these sections must be followed sequentially so that the PixmMacInstaller is deployed before any of the browser extensions.  The remaining sections walk through the uninstallation process.

Uploading Pixm Mac Installer Package to Jamf Pro

This section covers uploading the PixmMacInstaller and PixmMacUninstaller packages to Jamf Pro.

Login to Jamf Pro portal and click on the Settings gear on the top right

Under Computer Management tab, click on Packages

Click New on the top right corner

Under Filename, click on Choose File and upload the “PixmMacInstaller_0.1.0.8.pkg” (please do not change the name of pkg)

Click Save on bottom right. It will take a few seconds to upload. Upload can be validated by returning to Settings→Computer Management→Packages again from the first step

To upload the PixmMacUninstaller, follow the same steps with the “PixmMacUninstaller_0.1.0.8.pkg”

Creating a Smart Group for Pixm Mac Deployment

This section covers creating a Smart Group to track dynamically which Mac devices the PixmMacInstaller deploys to. When the browser extensions are deployed in subsequent steps, this step ensures that they are not installed on devices until the PixmMacInstaller has been installed first.

Click on Computers and select Smart Computer Groups from the left panel

Click on New and set the Display Name to “Computers With Pixm pkg Installed”

Click on the Criteria tab, click on Add and click on Show Advanced Criteria

Scroll down to Packages Installed By Casper and click Choose

In Value textbox, enter the filename that was uploaded (“PixmMacInstaller_0.1.0.8.pkg” in this example) and click Save.

This will create a smart group of computers that have the Pixm Mac Installer deployed. You can click on View to see the members of this smart group

Deploying Pixm Mac Installer

Click on Computers icon, and click on Policies in the left panel

Click on New on the top right corner. This will open up the Policies page

Set a Display Name for the Policy. Under Trigger, select Recurring Check-in and set Execution Frequency to Once Per Computer

Click on Packages in the left column. Click the Configure button 

Select Add for PixmMacInstaller_0.1.0.8.pkg. Leave Distribution Point and Action tab to defaults

Scroll down to Maintenance in left column and click on Configure

Confirm that the Update Inventory box is checked automatically

Click on Scope tab and click on Add

Add Computers or Computer Groups for deployment. After they are added. Click Save

(Optional) Check the deployment status in Options tab by clicking on Logs

Package should install within 15 minutes, depending on the check in time with the devices

Deploying Pixm Chrome browser extension 

This section will walk through the deployment of the Pixm Chrome browser extension. 

Go to the Computers icon and click on Configuration Profiles in the left panel. Click the Upload button on the top right

Choose the file “Profile for Pixm Chrome Extension Prod”, click Upload and click on Remove Signature

(Note the Application & Custom settings may or may not be visible as below)

Go to the Scope tab. Under Computer Groups, select “Computers With Pixm pkg Installed”, click Add and Done

Click Save. This will deploy the profile on the Smart Group target. You can check the logs to confirm the status

(Optional) Once the profile is deployed to Chrome on a given Mac, the deployment can be validated optionally on the device. On the device, the profile should be visible in System Settings –> Privacy & Security –> Profiles

(Optional) To further validate the deployment, restart or open the Chrome browser. The blue hexagon Pixm extension icon should be visible on the top right of the browser. You may have to click on a gray puzzle icon to see it.  If you click on the extension icon, you should see that it is registered with the appropriate organization.

Deploying Pixm Firefox browser extension 

The steps for deploying Pixm Firefox Browser extension are exactly the same as the steps in the Chrome section. The only change is that the ‘Profile for Pixm Firefox Extension Prod’ file will be used instead.

Deploying Pixm Safari browser extension 

Admins should be aware before proceeding: due to Apple’s Systems Integrity Protocol, completing Safari extension deployment will require consent steps from end users. This section covers those consent steps at the end.

Deployment of the Pixm Safari extension on Jamf Pro requires connecting JAMF Pro to an Apple Business Manager (or Apple School Manager) account and the enablement of Volume App Purchasing. Before proceeding, we should confirm these requirements. 

Log into Apple Business Manager at https://business.apple.com and click on the Apps and Books option in the left panel. Search for Pixm Desktop and the app will appear listed.

Select the Pixm Desktop app and, on the right side panel, select ‘Pixm, Inc’. In the Quantity textbox, enter the total number of Mac devices you wish to deploy to. 

Return back to the JAMF Pro portal. Click on the Computers icon and click Mac Apps in the left panel. The Pixm Desktop app should be visible.

Click on Pixm Desktop and Click on Edit

Click the Force Update button. For the Distribution Method, select Install Automatically/Prompt Users to Install

Under the Scope tab, click Add. Under Computer Groups sub tab, select “Computers With Pixm pkg Installed”, click Add and click Done

Under the Managed Distribution tab, click on the Device Assignments sub tab, check the box for Assign Content Purchased in Volume, and click Save

This will install the Pixm Desktop app onto all computers after the Mac Installer is deployed.

End User Consent Steps

Once the Pixm Desktop app is installed on a user’s device, the user will need to manually enable the extension and grant it necessary permissions in order to receive protection in Safari. The below steps are covered below from the end user’s perspective.

Navigate to the Applications folder. There should be an application called ‘Pixm Desktop.app’.  

Open the application. In the Pixm popup window, select ‘Enable for Safari’.

This will open the Extensions settings for Pixm in Safari Preferences. Enable the Pixm Desktop Extension by checking the checkbox for PIXM Phishing Protection.

Click on the “Always Allow on Every Website” button. 

Confirm, by again clicking on the “Always Allow on Every Website” button in the popup.

Now the Pixm Safari Extension is fully installed. To confirm, click on the Pixm extension icon on the top left of the Safari browser and you should see that it is registered with your organization.

Uninstalling Pixm Chrome browser extension

Click on Configuration Profile in the left panel and select the Chrome profile for removal

Click the Delete button. In next few minutes it will remove Extensions from the MacBook

Uninstalling Pixm Firefox Browser Extension 

Follow the same steps as the previous section for the Firefox profile. Full removal of Firefox extensions from user devices will complete only after completing remaining uninstallation steps.

Uninstalling Pixm Safari Browser Extension 

Click Mac Apps from the left Panel. Select Pixm Desktop and select Edit

Select the Scope tab.  Click Remove for the Computers With Pixm pkg Installed group

Click the Managed Distribution tab. Uncheck the box for Assign Content Purchased in Volume. Click Save

This will remove the Pixm Safari Desktop from Macs at the next check-in

Removing Smart Group for Pixm Mac Deployment

Select Smart Computer Groups from the left panel. Select “Computers with Pixm pkg Installed”. 

Click Delete on bottom right.

Uninstalling Pixm

The Pixm Mac Uninstaller will complete the full removal of the Pixm extensions and any other trace of Pixm on the devices.

Click on Computers icon and click on Policies

Click on New on the top right corner

On Policy page, set Display Name, (optional) for Trigger select Recurring Check-in and set Execution Frequency to Once Per Computer

Click on Packages in the left column. Select Configure and select Add PixmMacUninstaller_0.1.0.8.pkg. Leave Distribution Point and Action tab to default

Click on Scope tab and click Add

Select Computers or Computer Groups. Click Add and Done once selection is completed

This will deploy the Pixm Mac Uninstaller during the next check-in with Jamf. You can click on Logs to verify the progress