Mac Agent Code Signing on Privacy Preferences Policy Control (PPPC)

The Privacy Preferences Policy Control (PPPC) profile payload allows granting or denying of privacy access for specific applications to certain privacy features on macOS.

To obtain the agent code signing information, follow the below steps:

To obtain the agent code signing information:

1.

Download Mac agent without token (csia.dmg) and run.

2.

Navigate to csia binary location and run.

sh-3.2# codesign -dr - csia Executable=/Users/administrator/Downloads/csia designated => identifier csia and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = QD9WNRE2L6

3.

Placed the output in the Code Requirements section of PPPC configuration.