3. Enroll apps
Owner: IT Prerequisite: Step 2 (policy management) is complete on the pilot devices.
Upload the PKG
Section titled “Upload the PKG”File: RootsMac-<version>.pkg (from the Arbium team — Developer-ID-Application signed, notarized, hardened-runtime enabled).
Settings → Computer Management → Packages → +New. Upload the .pkg. Save.
Jamf stores it on your fleet’s configured Distribution Point.
Create the install policy
Section titled “Create the install policy”Computers → Policies → +New.
| Setting | Value |
|---|---|
| Display Name | Install Roots |
| Trigger | Recurring Check-in + Enrollment Complete |
| Frequency | Ongoing (during pilot); Once per computer (steady state) |
| Packages payload | RootsMac-<version>, Action: Install |
| Scope | Pilot group from Step 2 |
Save.
What lands on the device
Section titled “What lands on the device”/Applications/Roots.app- LaunchAgent under
/Library/LaunchAgents/com.trycaret.arbor.agent.plist - Status log at
~/Library/Application Support/RootsMac/status.jsonl(per-user)
The agent starts at user login under the console user — no UI, no Dock icon, no prompts.
Definition of done
Section titled “Definition of done”In Jamf, the package and policy are visible and the policy’s Logs tab shows the pilot Mac queued (or Completed once the Mac has checked in).