The Swif silent installer for macOS simplifies the process of enrolling devices into Swif's management system and removing existing MDM profiles. This guide outlines the steps to retrieve required configurations, prepare the installer, and deploy it silently on macOS devices.
Important Note: Silent Installer Does Not Support BYOD Enrollment
The Swif silent installer for macOS is designed for corporate-owned devices and does not support Bring Your Own Device (BYOD) enrollment. Ensure that all devices being enrolled using the silent installer are organization-owned.
Step 1: Retrieve Identifier and Removal Key
Before downloading the silent installer, you need to retrieve and save the identifier and removal key of the existing MDM profile in the Swif configuration area. These values are required when the MDM profile is password-protected, as the removal key serves as the profile's password.
Retrieve the Identifier of the Existing MDM Profile
Open the Terminal application.
Run the following command to list all profiles and extract detailed information in XML format:
sudo /usr/bin/profiles list -output stdout-xml
Locate the enrollment profile in the output by finding the
PayloadTypekey with the valuecom.apple.mdm:<key>PayloadType</key>
<string>com.apple.mdm</string>Identify the identifier under the
<key>PayloadIdentifier</key>tag:<key>PayloadIdentifier</key>
<string>com.companyname.mdm</string>In this example, the identifier is
com.companyname.mdm.
Removal Key
The removal key is the password associated with the MDM profile. This is necessary to remove profiles that are password-protected. If you don’t know the removal key, you may need to contact the previous MDM provider or your IT administrator.
Save the Identifier and Removal Key
Save the retrieved identifier and removal key in the Swif configuration area under the silent installer tab. This step is necessary before proceeding to the installer download.
Step 2: Download the Silent Installer
You can download the silent installer directly from the Swif admin dashboard. However, macOS may flag browser-downloaded files as potentially unsafe. To avoid this, we recommend using the CURL command in the Terminal to download the installer securely.
Use CURL to Download the Installer
Run the following command in your Terminal to download the installer:
curl -OL https://cdn.swifteam.com/st-agent-ui/{{TEAM_ID}}/1.40.0/macOS-Silent-macos-installer-x64-1.40.0.pkgReplace {{TEAM_ID}} with your organization’s Swif team ID.
Step 3: Install Swif Silently
Once the installer is downloaded, use the following command to install Swif silently:
sudo installer -pkg macOS-Silent-macos-installer-x64-1.40.0.pkg -target /
The silent installer will automatically use the identifier and removal key to remove any existing MDM profiles and enroll the device into Swif.
Step 4: Verify Installation
After the installation is complete, verify that the Swif agent has been successfully installed and the device is enrolled in Swif.
Check for the removal of the previous MDM profile by running:
sudo /usr/bin/profiles list
Additional Notes
Configuration Requirement: The identifier and removal key must be set in Swif before downloading the installer for seamless profile removal.
Admin Privileges: Ensure admin rights to execute commands and manage profiles.
Large-Scale Deployments: Use device management tools to deploy the installer and commands across multiple devices.
CURL Recommendation: Using
CURLensures the downloaded file is trusted and bypasses macOS warnings for browser-downloaded files.
Benefits of Silent Installation
Streamlined Setup: Automates the removal of existing MDM profiles and enrollment into Swif.
Scalable Deployments: Supports bulk deployment for enterprise environments.
User-Friendly Transition: Ensures minimal disruption during the device management transition.
For additional support, visit our help center or contact Swif support.
P.S. You can also use the silent installer on existing MDM-managed machines to silently migrate the existing MDM to Swif. Here are 2 examples:
Note, that the silent installer package can not be opened by double-clicking because of Apple policy or you might get this error "macOS silent installer can't be opened because Apple cannot check it for malicious software.
