Kandji - Zero Touch Installation of the Desktop App

How to to silently deploy Banyan’s desktop app using Kandji

  • Updated on Sep 29, 2022

This article describes features that are only available in the Banyan Enterprise edition.

Overview

Kandji is a mobile device manager (MDM) used to manage and secure Apple devices. In Banyan, it can be configured to package and distribute the desktop app to your device fleet using zero-touch installation. This completes a silent installation, which requires no interaction from your end users.

In this doc, we review the steps required to execute a zero-touch installation using Kandji.

Prerequisites

  • The deployment key from the Command Center (can be found under Settings > Desktop & Mobile > App Deployment).

  • Ensure that you’re familiar with mdm-config.json parameters to customize Banyan desktop app functionality. Note the following flag required to enable zero-touch mode:

  • mdm_invite_code - Obtained from Command Center (Settings > App Deployment > Invite Code)

Steps

There are two high-level steps required to silently deploy and install the Banyan desktop app then register devices with Banyan:

  • Step 1. Prepare the Banyan Zero Touch Install script - Configure zero touch script with the appropriate deployment parameters for your organization.
  • Step 2. Distribute the Zero Touch Install script to devices - Push down the configured script to your end users to register their devices with Banyan.

Step 1: Prepare the Banyan zero touch installation script for macOS

1.1 Download the script from the Banyan repo: Banyan App Installer.

1.2 Configure the script by entering the following values:

  • The INVITE_CODE value: This value can be found in Banyan’s Cloud Command Center under Settings > Desktop & Mobile > App Deployment.

  • The DEPLOYMENT_KEY value: This value can also be found under Settings > Desktop & Mobile > App Deployment, under the sub-header Zero-Touch Deployment Using a Device Manager. Select the Copy icon to the right of the Deployment Key value, and enter the copied value into your script.

  • The APP_VERSION value: You have the option of specifying an app version or leaving this value blank; if left blank, this field will auto-populate with the latest app version.

Note: Once configured, Banyan’s script automates the installation and registration process. The script will (i) generate an mdm-config.json file; (ii) download and install the latest version of Banyan’s app; (iii) stage the app with the device certificate,(iv) and start the app as the logged-in user.

Step 2: Distribute the zero touch install script to macOS devices via Kandji

2.1 Navigate to your Kandji Library, and select Add New.

2.2 Under General, select the Custom Script template.

2.3 Under Custom Script, select Add & Configure.

2.4 In the configuration page of your custom script, enter a title.

2.5 Under Assignment, select a Blueprint.

Note: The Blueprint designates which users’ devices you want to assign the script to.

2.6 Under Settings, set the Execution Frequency. Select the option to Run once per device.

2.7 Under Script Details, paste your configured script.

Can’t find what you’re looking for?

We’re happy to help. Contact our team.