Jamf Pro MacOS Deployment

Deploy PromptFence to your Mac fleet using Jamf Pro configuration profiles.

⏱️ Estimated Time: 25-35 minutes
👤 Required Access: Jamf Pro Administrator
📦 Deployment Method: Configuration Profile + Policy
🖥️ Supported Browsers: Chrome, Edge, Brave (on macOS)

Prerequisites

Jamf Pro subscription and admin access
Macs enrolled in Jamf Pro (user-approved or automated enrollment)
PromptFence License Key from your dashboard
Extension ID from Chrome Web Store (provided after publishing)
Chrome or Edge installed on target Macs

Deployment Overview

This guide covers deploying PromptFence to Google Chrome on macOS. The process involves:

Creating a Configuration Profile to force-install the extension
Configuring managed settings (License Key) via the profile
Scoping to target devices or groups

For Microsoft Edge, the process is similar but uses Edge-specific preference keys.

Step-by-Step Deployment

1Log into Jamf Pro

Navigate to your Jamf Pro console (e.g., yourcompany.jamfcloud.com) and sign in.

2Create Configuration Profile

Click Computers in the top navigation
Select Configuration Profiles
Click + New
Name the profile: PromptFence Extension - Chrome

3Add Custom Settings Payload

In the left sidebar, scroll down to Application & Custom Settings
Click Configure
Set Preference Domain: com.google.Chrome
Click + Add to add custom preferences

4Upload Configuration PLIST

Click Upload File (PLIST file) and create a PLIST with the following content:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <!-- Force install PromptFence -->
    <key>ExtensionInstallForcelist</key>
    <array>
        <string>EXTENSION_ID;https://clients2.google.com/service/update2/crx</string>
    </array>

    <!-- Configure managed settings -->
    <key>3rdparty</key>
    <dict>
        <key>extensions</key>
        <dict>
            <key>EXTENSION_ID</key>
            <dict>
                <key>license_key</key>
                <string>YOUR_LICENSE_KEY_HERE</string>
                <key>api_url</key>
                <string>https://promptfence-backend-production.up.railway.app</string>
                <key>managed_mode</key>
                <true/>
                <key>block_mode</key>
                <false/>
            </dict>
        </dict>
    </dict>
</dict>
</plist>

Replace:

EXTENSION_ID (appears twice) with the actual PromptFence Extension ID
YOUR_LICENSE_KEY_HERE with your License Key from the dashboard

📋 Find Your License Key:
Log in to app.promptfence.io → Settings → License

⚠️ Save as PLIST: Save this content as promptfence-chrome.plist on your local machine before uploading to Jamf.

5Set Profile Scope

Click the Scope tab
Under Targets, click + Add
Select target computers, groups, or departments
For pilot deployment, select a test group (e.g., "IT Department")

💡 Pilot First: Deploy to a small group initially, verify functionality, then expand scope organization-wide.

6Save and Deploy

Click Save at the bottom
The profile will automatically deploy to scoped devices
Macs will receive the profile on next check-in (default: every 15 minutes)

For Microsoft Edge (Optional)

To deploy to Microsoft Edge instead of Chrome, create a separate profile with:

Preference Domain: com.microsoft.Edge
Use the same PLIST structure (Edge supports the same policy keys)

Name it: PromptFence Extension - Edge

User Experience

What your users will see:

✅ PromptFence automatically installs in Chrome/Edge (no user action required)
✅ Pre-activated with your organization's License Key
✅ Extension is managed by organization (cannot be removed)
⚠️ Warning banner appears when visiting AI platforms
🛡️ Sensitive data paste attempts blocked or warned based on policy
📱 No notifications or prompts during installation

Verification

Confirm successful deployment:

Check Profile Status in Jamf:
- Go to Computers → Configuration Profiles
- Click your PromptFence profile
- View the Status tab to see installation progress
- Should show "Installed" for scoped devices
Test on a Mac:
- Open Chrome and navigate to chrome://extensions
- PromptFence should be listed with "Installed by your administrator"
Verify Managed Settings:
- In Chrome, go to chrome://policy
- Search for "ExtensionInstallForcelist" and verify the Extension ID appears
- Search for "3rdparty" and verify your License Key is configured
Test Functionality:
- Visit chatgpt.com
- You should see the PromptFence warning banner
Check Dashboard:
- Log in to app.promptfence.io
- Events from your users should appear in real-time

Troubleshooting

Profile not installing?

Wait for check-in: Jamf Macs check in every 15 minutes by default
Force update: On the Mac, run: sudo jamf policy
Check enrollment: Ensure the Mac is enrolled in Jamf Pro (not just enrolled in MDM)
Verify scope: Ensure the Mac is in the scoped group/department

Extension not appearing?

Check Chrome version: Ensure Chrome 88+ is installed
Restart Chrome: Completely quit and reopen Chrome (not just close window)
Check Extension ID: Verify the ID in the PLIST is correct
View profile on Mac: System Preferences → Profiles → verify PromptFence profile is installed

Extension installed but not activated?

Check License Key: Verify the key in the PLIST matches your dashboard
Check PLIST syntax: Ensure valid XML with no typos
View chrome://policy: Verify managed settings are applied

PLIST errors?

Validate XML: Use an online XML validator to check syntax
Check encoding: Ensure the file is saved as UTF-8
Test locally: Before uploading, test the PLIST on a Mac manually:
sudo defaults write /Library/Managed\ Preferences/com.google.Chrome -dict-add ...

Need help?

Contact PromptFence support: [email protected]

✅ Deployment Complete!
Your Mac fleet is now protected by PromptFence. Monitor activity in your dashboard.

Advanced Configuration

Custom Warning Messages

Add custom warning text by including in the PLIST:

<key>warning_message</key>
<string>This AI platform is monitored by IT. Do not share confidential data.</string>

Block Mode vs. Warn Mode

Control whether PromptFence blocks sensitive data or just warns:

<key>block_mode</key>
<true/>  <!-- Set to true to block, false to warn only -->

Set to <false/> for warn-only mode (recommended for initial rollout).

Deploy to Both Chrome and Edge

Create two separate profiles:

PromptFence Extension - Chrome (com.google.Chrome)
PromptFence Extension - Edge (com.microsoft.Edge)

Scope both to the same devices for dual-browser coverage.

Smart Groups for Targeting

Create a Smart Group for Chrome Users

To only deploy to Macs with Chrome installed:

Go to Computers → Smart Computer Groups
Click + New
Name: Macs with Chrome Installed
Add criteria: Application Title → is → Google Chrome.app
Save and use this group in your profile scope

Monitoring & Reporting

Track deployment status in Jamf:

Configuration Profiles → Status: See which devices have the profile installed
Computers → Search: Filter by "Configuration Profiles" → "PromptFence"
Advanced Computer Searches: Create reports for compliance tracking

Monitor actual usage in the PromptFence dashboard.

Next Steps

📊 Monitor your dashboard for real-time AI usage events
🔔 Set up email alerts in Settings → Notifications
📖 Review the Security Policy Guide to customize rules
👥 Educate users on safe AI usage practices
📈 Expand scope from pilot group to entire organization

Back to Deployment Overview