# Installing Collector profile in Jamf

Jamf is a device management platform that helps organizations deploy, configure, and secure Apple devices at scale. Using the Collector profile in Jamf Pro, securely install Collector on a wide variety of macOS devices with remote actions.

## Create a Collector configuration profile <a href="#installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf" id="installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf"></a>

You can [#installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf-1](#installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf-1 "mention") or [#installingcollectorprofileinjamfformacos-downloads](#installingcollectorprofileinjamfformacos-downloads "mention").

#### Create a new profile <a href="#installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf" id="installingcollectorprofileinjamfformacos-creatingthecollectorconfigurationprofileinjamf"></a>

For both `nxtsvc` (full disk access) and `nxtcod` (remote action process), perform the following steps:

{% stepper %}
{% step %}
In Jamf, select **Computers > Configuration Profiles**.
{% endstep %}

{% step %}
Select **Privacy Preferences Policy Control > Configure**.
{% endstep %}

{% step %}
Fill in the **Identifier** and **Code Requirement** fields in the **App Access** section.

<details>

<summary>Getting the Identifier and Code Requirement values for nxtsvc</summary>

To obtain the **Identifier**, run the following command on devices where Nexthink Collector is installed:

```bash
sudo codesign -dv /Library/Application\ Support/Nexthink/nxtsvc.app
```

This displays a response with the value of the **Identifier**, such as `com.nexthink.nxtsvcapp`. Copy that value to the **Identifier** input in Jamf.

To obtain the **Code Requirement**, run the following command on devices where Nexthink Collector is installed:

```bash
sudo codesign -dr - /Library/Application\ Support/Nexthink/nxtsvc.app
```

Copy the result of the designated output to the **Code Requirement** field in Jamf.

</details>

<details>

<summary>Getting the Identifier and Code Requirement values for nxtcod (optional)</summary>

The `nxtcod` binary also requires full disk access when remote actions need to access special folders or network shares.

To obtain the **Identifier**, run the following command on devices where Nexthink Collector is installed:

```bash
sudo codesign -dv /Library/Application\ Support/Nexthink/nxtcod.app
```

This displays a response with the value of the **Identifier**, such as `com.nexthink.nxtcod`. Copy that value to the **Identifier** input in Jamf.

To obtain the **Code Requirement** run the following command on devices where Nexthink Collector is installed:

```bash
sudo codesign -dr - /Library/Application\ Support/Nexthink/nxtcod.app
```

Copy the result of the designated output to the **Code Requirement** field in Jamf.

</details>
{% endstep %}

{% step %}
Select **Add**.
{% endstep %}

{% step %}
Set the following values:

| APP OR SERVICE       | ACCESS |
| -------------------- | ------ |
| SystemPolicyAllFiles | Allow  |
| {% endstep %}        |        |

{% step %}
Select **Scope** to define the scope of the profile.
{% endstep %}
{% endstepper %}

#### Download the predefined configuration profile components <a href="#installingcollectorprofileinjamfformacos-downloads" id="installingcollectorprofileinjamfformacos-downloads"></a>

| Component | Description                                                                                                            | File                                                                                                                                                                                                                                                                                                    |
| --------- | ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `nxtsvc`  | <p>Required by Apple Endpoint Security framework and Apple’s privacy guidelines.</p><p>This component is mandatory</p> | <p></p><ul><li><a href="https://download.nexthink.com/releases/latest/OSX_Collector/Nexthink-nxtsvc-Full-Disk-access_universal.mobileconfig">.mobileconfig file (signed)</a></li><li><a href="https://download.nexthink.com/doc/Nexthink-nxtsvc-Full-Disk-access_universal.xml">.xml file</a></li></ul> |
| `nxtcod`  | <p>Use it if remote actions need to access special folders or network shares.</p><p>This component is optional.</p>    | [.mobileconfig file](https://download.nexthink.com/doc/Nexthink-Configuration.mobileconfig)                                                                                                                                                                                                             |

## Prevent users from disabling Collector

By default, macOS offers users the ability to turn off background applications, including Collector. Perform the following steps to avoid this:&#x20;

{% stepper %}
{% step %}
In Jamf, select **Computers > Configuration Profiles**.
{% endstep %}

{% step %}
Select **Privacy Preferences Policy Control > Configure**.
{% endstep %}

{% step %}
Copy the team identifier from the Code Requirement field, which is the last value in the string:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2F69WYFFNhUXQwvOKQ2Uum%2Fimage.png?alt=media&#x26;token=93dae447-1c22-49d9-bb23-1b2a4cc9686d" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **Managed Login Items**.
{% endstep %}

{% step %}
Set the following values:

| Rule type       | Rule value                   |
| --------------- | ---------------------------- |
| Team Identifier | The value obtained in Step 3 |
| {% endstep %}   |                              |

{% step %}
Ensure the **Include** toggle is enabled.
{% endstep %}
{% endstepper %}

## Deployment

See the official [Jamf documentation](https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Package_Deployment.html) to learn how to deploy the package using Jamf.

Refer to [installing-collector-on-macos](https://docs.nexthink.com/platform/configuring_nexthink/bringing-data-into-your-nexthink-instance/deploying-nexthink-in-non-vdi-environment/installing-collector/installing-collector-on-macos "mention") to learn the general installation and deployment procedure.