# Create and deploy configuration profiles for SafeDNS Endpoint Lite on macOS

##### <span style="font-weight: 400;">Before deploying the SafeDNS daemon and filtering module, install two configuration profiles on the target macOS devices:</span>

- **SafeDNS\_DNS\_Proxy - Custom Configuration Profile**
- **SafeDNS\_Profile\_for\_System\_Extension - System Extension Policy**

<span style="font-weight: 400;">The steps below use SimpleMDM as an example. Other MDM platforms may use different menu names.</span>

#### **1. Create the SafeDNS DNS Proxy profile**

1. <span style="font-weight: 400;"> Go to **Configs** &gt; **Profiles**  
    [![config_profile1.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/PkdegPn0hWzVKYWl-config-profile1.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/PkdegPn0hWzVKYWl-config-profile1.png)</span>
2. <span style="font-weight: 400;">**Click Create Profile.**</span><span style="font-weight: 400;">[![config_profile2.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/KbMHNfXGJL3iA4ns-config-profile2.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/KbMHNfXGJL3iA4ns-config-profile2.png)</span>
3. <span style="font-weight: 400;"> Select **Custom Configuration Profile**.  
    [![config_profile3.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/caO6iRFhF9yDFVJe-config-profile3.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/caO6iRFhF9yDFVJe-config-profile3.png)  
    </span>
4. <span style="font-weight: 400;"> Name the profile **SafeDNS\_DNS\_Proxy** (as an example).  
    </span>
5. <span style="font-weight: 400;"> Upload **SafeDNS-DNSProxy.mobileconfig** without changing the file (Provided by SafeDNS). This file has all the required parameters.</span>
6. <span style="font-weight: 400;">Click Save.</span>

#### **2. Create the System Extension profile**

1. <span style="font-weight: 400;"> Go to **Configs** &gt; **Profiles** &gt; **Create Profile.**</span>
2. <span style="font-weight: 400;"> Select **System Extension Policy**.  
    [![config_profile4.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/4h7RxrBjSOFshtgf-config-profile4.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/4h7RxrBjSOFshtgf-config-profile4.png)  
    </span>
3. <span style="font-weight: 400;"> Name the profile **SafeDNS\_Profile\_for\_System\_Extension** (as an example).</span>
4. <span style="font-weight: 400;"> Use the following values:</span>
    - Team Identifier — **B2TN6DQ93U**
    - Bundle Identifier — **com.safedns.agent.SafeDNSMacProxy.dnsProxy**
    - Notes (optional) — **SafeDNS DNS Proxy system extension** (SafeDNSMacProxyDNS)
5. <span style="font-weight: 400;">Allow the following extension types:</span>
    
    
    - **Driver Extension**
    - **Network Extension**
    - **Endpoint Security Extension**

<span style="font-weight: 400;">[![config_profile5.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/dRSrYVoFpX7MA6aS-config-profile5.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/dRSrYVoFpX7MA6aS-config-profile5.png)</span>

6. <span style="font-weight: 400;"> Click **Save**.</span>

#### **3. Assign the profiles to target devices**

1. <span style="font-weight: 400;"> Go to **Groups** and select the target device group.</span>
2. <span style="font-weight: 400;"> Open the **Profiles** tab.</span>
3. <span style="font-weight: 400;"> Add both profiles created earlier:</span>
    - **SafeDNS\_DNS\_Proxy**
    - **SafeDNS\_Profile\_for\_System\_Extension**

**[![config_profile6.png](https://docs.safedns.com/uploads/images/gallery/2026-05/scaled-1680-/gzLIumQzsHZOFc1F-config-profile6.png)](https://docs.safedns.com/uploads/images/gallery/2026-05/gzLIumQzsHZOFc1F-config-profile6.png)**

4. <span style="font-weight: 400;"> Click **Review** **&gt;** **Save changes**.</span>
5. <span style="font-weight: 400;"> Run **Group Actions** **&gt;** **Sync Profile**.</span>

<span style="font-weight: 400;">The profiles should appear in 2-5 seconds on the target Mac under **System Settings &gt; General &gt; Device Management**.</span>

#### **How to remove the profiles**

<span style="font-weight: 400;">To remove the profiles, unassign both profiles from the device group, save the changes, and run Sync Profile again.</span>

<span style="font-weight: 400;">After synchronization, check **System Settings &gt; General &gt; Device Managemen**t on the target Mac. The SafeDNS profiles should no longer be listed.</span>