Create and deploy configuration profiles for SafeDNS Endpoint Lite on macOS

Before deploying the SafeDNS daemon and filtering module, install two configuration profiles on the target macOS devices:

• SafeDNS_DNS_Proxy - Custom Configuration Profile
• SafeDNS_Profile_for_System_Extension - System Extension Policy

The steps below use SimpleMDM as an example. Other MDM platforms may use different menu names.

1. Create the SafeDNS DNS Proxy profile

1. Go to Configs > Profiles
   
2. Click Create Profile.
3. Select Custom Configuration Profile.
   
   
4. Name the profile SafeDNS_DNS_Proxy (as an example).
   
5. Upload SafeDNS-DNSProxy.mobileconfig without changing the file (Provided by SafeDNS). This file has all the required parameters.
6. Click Save.

2. Create the System Extension profile

1. Go to Configs > Profiles > Create Profile.
2. Select System Extension Policy.
   
   
3. Name the profile SafeDNS_Profile_for_System_Extension (as an example).
4. Use the following values:

   • Team Identifier — B2TN6DQ93U

   • Bundle Identifier — com.safedns.agent.SafeDNSMacProxy.dnsProxy

   • Notes (optional) — SafeDNS DNS Proxy system extension (SafeDNSMacProxyDNS)

5. Allow the following extension types:

   • Driver Extension
   • Network Extension
   • Endpoint Security Extension

6. Click Save.

3. Assign the profiles to target devices

1. Go to Groups and select the target device group.
2. Open the Profiles tab.
3. Add both profiles created earlier:
   • SafeDNS_DNS_Proxy
   • SafeDNS_Profile_for_System_Extension

4. Click Review > Save changes.
5. Run Group Actions > Sync Profile.

The profiles should appear in 2-5 seconds on the target Mac under System Settings > General > Device Management.

How to remove the profiles

To remove the profiles, unassign both profiles from the device group, save the changes, and run Sync Profile again.

After synchronization, check System Settings > General > Device Management on the target Mac. The SafeDNS profiles should no longer be listed.