Manage devices
Step-by-step guides to help you manage the device deployment of Keep Aware.
Configure device policies
While CLI-based policy management remains fully supported, we recommend using Device Configuration Profiles for centralized policy management. Profiles let you configure and deploy browser policies from the Keep Aware console without requiring manual CLI commands on each device. See Deploy device configurations for details.
Grant app permissions
Apple requires macOS applications to request permission before accessing sensitive system resources such as disk access. The Keep Aware client uses this access to enrich threat detections—for example, by computing file hashes on downloaded files.
Deploy through a Group Policy package
This document describes one supported option for deploying the Keep Aware client in environments that use Group and do not use a separate software distribution tool or MDM (e.g., SCCM, Intune, Jamf, etc.).
Deploy device configurations
Device Configuration Profiles let you centrally manage browser policies from the Keep Aware console. Define policies once, assign them to device groups, and let Keep Aware automatically sync configurations to endpoints—no MDM or Group Policy required.
Create and send support codes
Support codes provide a temporary way to disable safeguards and other restrictive features of Keep Aware for a specific device. This is useful for troubleshooting, IT support sessions, or situations where security controls need to be temporarily bypassed.
Manage browser extensions with device policy
Manage which browser extensions are installed on your devices — including the Keep Aware extension — directly from a Device Configuration Profile. Define extension policy once, optionally let Keep Aware merge in its own extension automatically, and download a ready-to-deploy configuration profile for your MDM. You no longer have to hand-maintain Keep Aware extension IDs in your own MDM to keep the extension pinned.