Skip to main content
Deploy PMG with a JumpCloud Command that runs as root. Use the multi-file MDM scripts and ship lib_macos.sh with the install or uninstall script.
A SafeDep subscription is required to sync PMG events with SafeDep Cloud.
You need a SafeDep Cloud API key and Tenant ID from app.safedep.io/settings/api-keys. Installs sync to Package Guard.

​
Install

1

Create a Command

In the JumpCloud Admin Console, create a Command and set Run As to root.
2

Attach the scripts

Upload lib_macos.sh and pmg_setup_install_macos.sh from scripts/mdm/. You can optionally upload config.yml for a machine-wide config. If you do, set cloud.enabled: true in it. Set the File Destination to /tmp/pmg-mdm/ for each file.
3

Set the timeout

Set Timeout After to at least 900 seconds so a slow download is not killed mid-run.
4

Add Cloud variables

Define the Command Variables safedep_api_key and safedep_tenant_id. Mark the API key as a Secret variable.
5

Set the Command body

6

Assign and run

Assign the Command to a device group and run it.

​
Uninstall

1

Create a second Command

Set Run As to root. Upload lib_macos.sh and pmg_uninstall_macos.sh with File Destination /tmp/pmg-mdm/.
2

Set the Command body

3

Assign and run

Assign the Command to the same device group and run it. Do not run the install and uninstall Commands on the same devices at the same time.

Other MDMs

Jamf, Intune, and the script layout.

MDM scripts README

Source of truth in the PMG repo.