Skip to content
mSCP

What Are Configuration Profiles?

Configuration profiles are XML files (.mobileconfig) that define settings and restrictions for Apple devices. They allow administrators to enforce security configurations across macOS, iOS, iPadOS, and tvOS devices.

The mSCP project generates configuration profiles from your baseline, ready to deploy via MDM.

How They Work

Section titled “How They Work”
Step Description
Generate Run ./mscp.py guidance -p to create profiles from your baseline
Deploy Upload profiles to your MDM solution
Enforce Settings are applied automatically to managed devices

Profiles can also be signed with a certificate (-H flag) to ensure authenticity and prevent tampering.

What the Project Generates

Section titled “What the Project Generates”
Type Flag Description
Individual profiles -p One profile per payload type (recommended for flexibility)
Consolidated profile --consolidated-profile All settings in a single profile
Granular profiles --granular-profiles Granular profiles
Signed profiles -H HASH Profiles signed with your certificate

Output location: build/BASELINE_NAME/mobileconfigs/

End-User Experience

Section titled “End-User Experience”
  • Profiles are deployed silently through MDM
  • Settings take effect immediately (some may require reboot)
  • Users can view profiles in System Settings > Privacy & Security > Profiles
Section titled “Helpful Links”

Next Steps

Section titled “Next Steps”