What Are Configuration Profiles?
Configuration profiles are XML files (.mobileconfig) that define settings and restrictions for Apple devices. They allow administrators to enforce security configurations across macOS, iOS, iPadOS, and tvOS devices.
The mSCP project generates configuration profiles from your baseline, ready to deploy via MDM.
How They Work
Section titled “How They Work”| Step | Description |
|---|---|
| Generate | Run generate_guidance.py -p to create profiles from your baseline |
| Deploy | Upload profiles to your MDM solution |
| Enforce | Settings are applied automatically to managed devices |
Profiles can also be signed with a certificate (-H flag) to ensure authenticity and prevent tampering.
What the Project Generates
Section titled “What the Project Generates”| Type | Flag | Description |
|---|---|---|
| Individual profiles | -p | One profile per payload type (recommended for flexibility) |
| Consolidated profile | -P | All settings in a single profile |
| Signed profiles | -H HASH | Profiles signed with your certificate |
Output location: build/BASELINE_NAME/mobileconfigs/
End-User Experience
Section titled “End-User Experience”- Profiles are deployed silently through MDM
- Settings take effect immediately (some may require reboot)
- Users can view profiles in System Settings > Privacy & Security > Profiles
Helpful Links
Section titled “Helpful Links”- Apple Platform Deployment: Configuration Profiles
- Apple Developer: Device Management Profile
- Configuration profiles on Mac
Next Steps
Section titled “Next Steps”- How to Generate Configuration Profiles - Create profiles from your baseline
- Configuration Profile Layout - Understand the file structure