Installing Collector profile in Jamf

Jamf is a device management platform that helps organizations deploy, configure, and secure Apple devices at scale. Using the Collector profile in Jamf Pro, securely install Collector on a wide variety of macOS devices with remote actions.

Create a Collector configuration profile

You can Create a new profile or Download the predefined configuration profile components.

Create a new profile

For both nxtsvc (full disk access) and nxtcod (remote action process), perform the following steps:

1

In Jamf, select Computers > Configuration Profiles.

2

Select Privacy Preferences Policy Control > Configure.

3

Fill in the Identifier and Code Requirement fields in the App Access section.

Getting the Identifier and Code Requirement values for nxtsvc

To obtain the Identifier, run the following command on devices where Nexthink Collector is installed:

sudo codesign -dv /Library/Application\ Support/Nexthink/nxtsvc.app

This displays a response with the value of the Identifier, such as com.nexthink.nxtsvcapp. Copy that value to the Identifier input in Jamf.

To obtain the Code Requirement, run the following command on devices where Nexthink Collector is installed:

sudo codesign -dr - /Library/Application\ Support/Nexthink/nxtsvc.app

Copy the result of the designated output to the Code Requirement field in Jamf.

Getting the Identifier and Code Requirement values for nxtcod (optional)

The nxtcod binary also requires full disk access when remote actions need to access special folders or network shares.

To obtain the Identifier, run the following command on devices where Nexthink Collector is installed:

sudo codesign -dv /Library/Application\ Support/Nexthink/nxtcod.app

This displays a response with the value of the Identifier, such as com.nexthink.nxtcod. Copy that value to the Identifier input in Jamf.

To obtain the Code Requirement run the following command on devices where Nexthink Collector is installed:

sudo codesign -dr - /Library/Application\ Support/Nexthink/nxtcod.app

Copy the result of the designated output to the Code Requirement field in Jamf.

4

Select Add.

5

Set the following values:

APP OR SERVICE	ACCESS
SystemPolicyAllFiles	Allow

6

Select Scope to define the scope of the profile.

Download the predefined configuration profile components

Component	Description	File
nxtsvc	Required by Apple Endpoint Security framework and Apple’s privacy guidelines. This component is mandatory	.mobileconfig file (signed) .xml file
nxtcod	Use it if remote actions need to access special folders or network shares. This component is optional.	.mobileconfig file

Prevent users from disabling Collector

By default, macOS offers users the ability to turn off background applications, including Collector. Perform the following steps to avoid this:

1

In Jamf, select Computers > Configuration Profiles.

2

Select Privacy Preferences Policy Control > Configure.

3

Copy the team identifier from the Code Requirement field, which is the last value in the string:

4

Select Managed Login Items.

5

Set the following values:

Rule type	Rule value
Team Identifier	The value obtained in Step 3

6

Ensure the Include toggle is enabled.

Deployment

See the official Jamf documentation to learn how to deploy the package using Jamf.

Refer to Installing Collector on macOS to learn the general installation and deployment procedure.