HowTo import .mobileconfig files without MDM Server?

[massoo]

Hello All,

We do not have any external MDM tied to our MAC devices. We use CrowdStrike as antivirus which requires "Full Disk Access" and "Web Preferences" Extensions Enabled. These are granted while we install CrowdStrike manually.

We are trying to import the official CrowdStrike profile in our MAC M1 and later laptops with their OS being macOS Ventura 13.x , as detailed in https://supportportal.crowdstrike.com/s/article/ka16T000000wtMWQAY

The command that we are using to import is :
> open /System/Library/PreferencePanes/Profiles.prefPane ~/Desktop/MAC/Official-CS-Falcon-Profile-no-Kext.mobileconfig
- This opens up the Profiles utility, where user can accept the prompts and install the profile.
- This profile is not signed (meaning its unsigned)

However this fails with error:

Profile installation failed
The profile must originate from a user-approved MDM server

I have also tried to install the profile with self-signed certificate, but the error is same

Is there a way to install / import a profile without an MDM Server ?

Please guide me

 

[IWT]

Firstly; a warm welcome to Mac-Forums.

I have done quite a bit of research into CrowdStrike and there seems to be some difficulties when trying to install it on to macOS Ventura. Parts may install, other parts may not. As usual, there are the happy and the dissatisfied customers.

So CrowdStrike AV may have problems installing into Ventura; in part or in whole.

Although you didn't ask this and I mean no offence at all; but the Macintosh community is strongly of the view that strict antivirus products are NOT needed at all.

And the downside is that they slow down the Mac's operations.

Interestingly, the prices CrowdStrike charge are very high in my estimation:

https://www.trustradius.com/products/crowdstrike-falcon/pricing

From $6.99 to $17.99 per month - wow!

Clearly, your choice. I don't mean to intrude, merely inform.

Ian

 

[newbutter]

As far as I know, without an MDM solution, you won't be able to bypass this requirement.

There may be ways around this, such as manually granting the necessary permissions, but it's a more involved process and may not be feasible if you have many devices to manage.

I would recommend reaching out to CrowdStrike support or considering an MDM solution to manage these profiles more effectively.