Using MDM for Zoom Rooms with macOS Mojave
It is necessary to authorize Zoom Rooms to utilize the microphone and camera when the Zoom Rooms app is first installed on Mac OS 10.14 Mojave, due to increased security measures. In order to bypass this prompt when using MDM in order to deploy and manage Zoom Rooms, you need to deploy a configuration for an MDM profile to the Zoom Room device in order to skip this prompt.
Prerequisites for using MDM for Zoom Rooms with macOS 10.14 Mojave
-
Mojave is the latest version of OS 10.14
-
The license for Zoom Room can be found here
-
Services related to MDM
How to configure the MDM profile for Zoom Rooms with macOS Mojave
Using Privacy Service Dictionary Keys, you can attach access authorization to a profile in order to authorize access to the system’s camera and microphone, but you cannot allow access to the system’s camera and microphone. Alternatively, by configuring the “SystemPolicyAllFiles” key, the Zoom Room application will be able to access all protected files, as well as the camera and microphone, as long as they are enabled.
-
Create a custom profile in your MDM service by opening it up.
-
Here you can see an example of the XML needed for the profile by viewing the .plist file attached at the bottom of this page.
-
Your MDM server is responsible for delivering the device profile to the devices.
-
By selecting System Preferences on your Mac device, and then selecting Profiles, you may check to see if your profile has been successfully delivered.
How to configure AirWatch for Zoom Rooms with macOS Mojave
-
Click ADD in the Profiles section of AirWatch once the application has been opened.
-
In the Add Profile window, click the Mac OS – “Device Profile” option and then select the platform as “macOS”.
-
The next page asks you to enter the necessary information and, once that is done, you should click the Privacy Preferences button.
-
Using the fields below, enter the following values in the fields on the next page:
-
Identifier = ZoomPresence.us.zoom.
-
Identifier Type = BUNDLE ID
-
Code Requirement = identifier “us.zoom.ZoomPresence” and anchor apple generic
-
System Policy All Files = Allow
-
Accessibility = Allow (select to allow the Zoom Room app to dismiss screensavers on macOS 10.14).
-
-
You can save your work and publish it once you have saved the page. Manual installation is possible if the assignment type is set to Optional, or automatic installation is possible if the assignment type is set to Automatic.