Skip to main content

Deploy with Jamf

Use Jamf Pro to deploy the Willow Scan Agent package and managed configuration profile to macOS devices.

Prerequisites​

  • Jamf Pro admin access with permission to manage packages, configuration profiles, policies, and scopes.
  • A Smart Group or Static Group for pilot devices.
  • The macOS .pkg installer and .mobileconfig profile from the Willow AI Discovery setup flow.

Minimum requirements​

ComponentMinimum requirement
Jamf softwareJamf Pro with access to Package Management, Computer Configuration Profiles, policies, and scopes.
Target OSManaged macOS devices. This guide does not apply to Windows or Linux devices.
Willow filesThe macOS .pkg installer and .mobileconfig profile from Willow.
Device stateTarget Macs must be enrolled and checking in to Jamf Pro.

Willow does not publish a separate minimum Jamf Pro version. Use a currently supported Jamf Pro release that provides the features listed above.

Expected outcome​

Target Macs receive the Willow managed configuration profile, install the Scan Agent package, and appear in AI Discovery after the next scan interval.

AI Discovery can also deploy Willow Guard for browser-based signals through a Chrome policy profile. Keep the Scan Agent package/profile and Willow Guard Chrome policy as separate Jamf configuration items. See Deploy Willow Guard Browser Extension.

Upload the configuration profile​

  1. In Jamf Pro, open Computers > Configuration Profiles.
  2. Create a new profile or upload the .mobileconfig file from Willow.
  3. Name the profile clearly, such as Willow Scan Agent Configuration.
  4. Scope the profile to your pilot device group.
  5. Save the profile.

Upload the package​

  1. In Jamf Pro, open package management.
  2. Upload the Willow .pkg installer.
  3. Name the package clearly, such as Willow Scan Agent.
  4. Save the package.

Create the install policy​

  1. In Jamf Pro, open Computers > Policies.
  2. Create a new policy named Install Willow Scan Agent.
  3. Set the trigger used by your organization, such as recurring check-in or enrollment complete.
  4. Add the Willow Scan Agent package to the policy.
  5. Scope the policy to the same pilot device group as the configuration profile.
  6. Save the policy.

Deploy the configuration profile before or with the package. If the package installs before the profile reaches the device, restart the agent after the profile arrives.

Verify on a Mac​

Run these commands on a scoped test Mac:

sudo profiles list -type configuration | grep -i willow
sudo launchctl print system/com.mcp-s-scan.agent
tail -n 50 /var/log/mcp-s-scan/agent-error.log

Then open AI Discovery in Willow and confirm the device appears with a recent last scan time.

Expand rollout​

After the pilot group reports successfully:

  1. Expand the configuration profile scope.
  2. Expand the install policy scope.
  3. Monitor Jamf policy results and Willow AI Discovery device counts.

Roll back​

To remove the agent from a Mac, run the uninstall script through a Jamf policy:

sudo /usr/local/bin/mcp-s-scan-uninstall.sh

Remove the configuration profile from the same device scope if the device should stop reporting to Willow.

On this page