UniFi Identity Enterprise - Manage Corporate and BYOD Devices’ Software

Identity Enterprise software management allows IT admins to easily install, uninstall, and manage software for corporate-owned and BYOD Macs and Windows PCs through the Identity Enterprise desktop apps.

Notes:

• We only support uploading .exe and .msi files for Windows systems, and .pkg and .dmg files for Macs.
• The software will be deployed onto users’ devices when their devices are on and their Identity Enterprise desktop apps are signed in.

Add Software

After adding software, the software will be automatically installed on the applied users’ devices with the Identity Enterprise desktop apps sign-in.

1. Go to Trusted Devices > Software.
2. Click the + icon.
3. Specify the software name.
4. Upload the software logo as needed.
5. Upload the software package.
6. Select "Windows" or "macOS".
7. If you select macOS, enter the software’s Bundle ID. Refer to "Identify the Bundle ID for Mac" below for details.
8. Enter the software version.
9. Select the license type and enter the price if it’s paid. This feature keeps track of the cost of your software.
10. Code requirements: Specify the conditions that the system uses to evaluate the code signature and determine if the code is safe to be trusted. If the code fails to satisfy the requirements during evaluation, the code signature validation fails. Refer to "Fetch Code Requirements of Software" below for details.
11. Enter the Install Parameter as needed.
12. Enter a software description.
13. Apply to: Select to apply this software management policy to "All Workspace Users" or "Specific Users".

Manage Software

Activate, Suspend, or Remove Software

1. Go to Trusted Devices > Software > Management.
2. Select a software and go to Settings > Overview.
3. Suspend: When suspended, the system will cease installing the software on the devices of newly applied users. The software will not be removed from the devices where it has already been installed.
4. Activate: Activate the suspended software.
5. Remove: Remove the software from the software list. The software will not be uninstalled from the devices where it has already been installed.

Identify the Bundle ID for Mac

Method 1

Run the following command in your Terminal and replace the “path” with the path of the software and “yourapp” with the software name. You can see the Bundle ID after the text designated => identifier in the output.

codesign -dr - /path/to/yourapp.app

Method 2

1. Right-click on the software you want to fetch the bundle ID.
2. Select Show Package Contents > Info.plist.
3. A CFBundleIdentifier key will contain the Bundle ID in its key value.

Fetch Code Requirements of Software

Note: It is recommended to manually validate the script execution on a system before executing the action in bulk.

macOS

Run this command in your Terminal and replace the “path/Bundle ID” with the path or Bundle Identifier of the software. You can see the code requirement after the text designated => in the output.

codesign -dr - "path/Bundle ID"

Windows

Run this command in your Powershell and replace the “file” with the path of the software.

Get-AuthenticodeSignature file | format-list