Specifying initial applications

You can configure Maintenance to automatically install a set of predefined applications on macOS devices that enroll with Maintenance. These initial applications are typically critical applications, such as administrative tools like the Tanium Client or antivirus software. After you add an application to the list of initial applications, you can assign the application to a server token. Maintenance automatically installs these applications on each device that enrolls with that server token.

For information about server tokens, see Managing server tokens.

To install initial applications, you must use automated device enrollment. For more information, see Automated device enrollment.

Maintenance attempts to install each initial application one time during enrollment. If an application fails to install, you must install the application at a later time using a different method. For best results, use Tanium™ Deploy to manage upgrades for installed applications and to manage installation of applications on devices already enrolled in Maintenance.

Before you begin

Application software must be a single PKG file that is digitally signed. The software installation process must not require any command line or other user interactions.

Add an initial application

From the Maintenance menu, click Apple Device Enrollment and then click Initial Applications.
Click Add and then enter the application Name and Version information.
Select the processor architecture that the application requires and upload the installation file. The file type must be PKG.
Click Add to save the application.

Assign initial applications to server tokens

Select the server tokens to which you want to assign an application. Each device that enrolls with the assigned server token receives the initial applications assigned to the token. You can assign applications to multiple server tokens.

From the Maintenance menu, click Apple Device Enrollment and then click Initial Applications.
Complete one of the following tasks:

To assign an individual application: From the list of applications, select the checkbox for application you want to assign and click Actions > Edit Tokens. Select a token from the dropdown list and click Edit.
To assign multiple applications: From the list of applications, select the checkbox for each application you want to assign and click Actions > Assign Tokens. Select one or more tokens from the dropdown list and click Assign.

View initial applications assigned to a server token

From the Maintenance menu, click Apple Device Enrollment and then click Tokens.
From the list of server tokens, click a token name and then click Initial Applications.

Edit initial application assignments

From the Maintenance menu, click Apple Device Enrollment and then click Initial Applications.
In the list of applications, select the checkbox for an application and then click Actions > Edit Tokens.

Mac and macOS are trademarks of Apple Inc., and registered in the U.S. and other countries and regions.