Library Items & Profiles

The Certificate Library Item allows you to upload certificates and certificate identities and deploy them to your Apple devices. You might want to use this Library Item if you are configuring services that require a valid certificate trust chain...

What is a Lock Screen Message? A lock screen message is a customizable text that appears on an iPhone or iPad's lock screen. It can be used to display personal or organizational details, add a custom note or reminder, or provide contact information...

AirPrint profiles allow you to display AirPrint printers available in a user’s Add Printer list when connected to the same local network.  AirPrint printers are not automatically added to a device. If you would prefer a printer...

What is 802.1X Authentication? 802.1X is a standard for controlling access to a network. It ensures that only authorized devices can connect, making your network more secure. This protocol is used in both wired (ethernet) and wireless networks. Ho...

The Home Screen Layout Library Item allows you to determine the placement of apps on the iPad and iPhone devices in your fleet. When combined with the Wallpaper and Restrictions Library Items , you can create a consistent experience for your user...

What are Login & Background Items? Login and background items refer to applications, processes, or scripts that are set to automatically start when a user logs in or when the system boots up. These items can enhance user experience by providing...

The Recovery Password library item allows you to configure and apply recovery passwords to Mac computers with Apple silicon and EFI firmware passwords to Intel-based Mac computers, all from within the same library item. Kandji supports automatica...

What is SSH? SSH, or Secure Shell, is a network protocol that allows admins to securely access and manage a remote computer over an encrypted connection. It is commonly used by Mac admins to issue remote commands, access important files, and run ap...

The Wallpaper Library Item has two main functions: it allows you to deploy a custom wallpaper to iPhone and iPad devices and restrict users from modifying the wallpaper. Once you, as an admin, determine that a standard wallpaper should be deployed...

What is a Web Clip? A web clip is a shortcut or visual bookmark that provides quick access to a specific web page directly from a device's home screen. Unlike traditional bookmarks, Web Clips appear as icons on the home screen of iOS and iP...

What is 802.1X Authentication? 802.1X is a standard for controlling access to a network. It ensures that only authorized devices can connect, making your network more secure. This protocol is used in both wired (ethernet) and wireless networks. Ho...

What is Platform SSO? Platform SSO is a capability that allows users to sign in to their Mac devices using a hardware-bound key, smart card, or their IdP password. This feature enhances the Microsoft Enterprise SSO plug-in for Apple devices, provid...

What is AirPlay ? AirPlay is Apple's wireless protocol for streaming and sharing media like videos, photos, and music from Apple devices such as iPhone, iPad, and Mac to compatible devices like Apple TV , smart TVs, and speakers. It su...

What is Disk Management? In macOS Sequoia , Disk Management allows you to set mount restrictions for external and network drives. Kandji admins can choose to enable or disable the use of external and network storage entirely or only allo...

What is Setup Assistant? Setup Assistant is a built-in feature in macOS , iOS , and iPadOS that helps users configure their devices out of the box. It's typically encountered when setting up a new device or after a factory reset; on Ma...

What are In-House Apps? In-House apps are proprietary applications designed for internal use within an organization. They are particularly useful when you need to keep your custom apps private and avoid the Apple App Store 's review process. Th...

What is PPPC? Privacy Preferences Policy Control (PPPC) in macOS helps administrators manage app permissions and protect user data. Using a PPPC profile, you can pre-approve apps' access to system services like the camera, microphone, and file...

Kandji allows you to upload and deploy custom apps to your enrolled Mac devices. Add Custom App library items to ensure that all required applications are ready for your users.  Installers Kandji supports several different installe...

Getting Started Before you create your Custom Printer library item, you will need two things:  The driver installer package associated with that printer and  The file path to the PPD installed by the package. Typically the correct P...

What are Custom Profiles? Custom profiles, which end in a .mobileconfig extension, are XML files that contain settings and authorization information for Apple devices. These profiles are based on Apple's Mobile Device Management ( MDM ) framewor...

What is a Custom Script? Custom scripts in Kandji are a powerful way to automate tasks and configure settings on Mac computers. Think of them as a set of instructions that can be deployed and executed on enrolled devices using the Kandji Agent ...

Add an App to your Kandji Library Click on Library in the navigation bar. Click on Add New.   Select Custom App . Click Add & Configure .  Complete the following items: Custom App Name : Display na...

Status Indicators The following visual indicators can be found throughout the Kandji Web App: A green circle indicates success An orange circle indicates an error A grey circle indicates that the status is pending the next check-in...

The Library inside your Kandji account is where you can curate, create, and select items that can be added to any Blueprint . Library Interface Overview Clicking the Library Item filter will allow you to view all sections or a single s...

The Login Window profile allows you to customize options for the login window and lock screen, including Login Window & Lock Screen messages, available buttons, and user account visibility. Creating a Login Window Profile  Navigate to ...

When using Passport , you'll need to remove the Passcode library item from the Classic Blueprint or Assignment Map containing Passport to avoid configuration conflicts. Your IdP should handle password requirements.  Click he...

What are Safari Extensions? Safari extensions in iOS and iPadOS 18 are designed to enhance the Safari browser by allowing users to customize their browsing experience. These extensions can help with tasks such as blocking a...

Kandji 's SCEP Profile feature allows you to distribute and re-distribute certificates to Apple devices automatically. Only static challenges are supported when using the SCEP Library Item . Create a SCEP Profile  Log in to your Kandji ...

What is a Single Sign-On Extension? A Single Sign-On (SSO) extension is a type of application for macOS , iOS , iPadOS , and visionOS that leverages Apple's Extensible Enterprise Single Sign-on framework. These applications, or exten...

What Is a System Extension ? System extensions are the modern replacement to kernel extensions (kexts) in macOS Catalina. With system extensions, Apple provides new frameworks for developers to perform tasks previously reserved for kexts. ...

What is App Lock? App Lock is a feature that restricts an Apple device to a single app, enhancing security and focus by preventing access to other apps and system functions. This feature is particularly useful in environments where devices need to ...

As of April 9, 2025, Classic Blueprints are deprecated—effective immediately for new customers and taking effect for existing ones. While it’ll no longer be possible to create new Classic Blueprints, existing ones will continue to function and be ...

When the installation of a Library item fails, it can happen for a number of reasons. If Kandji receives confirmation that the installation of a Library item has failed, that Library item installation will not be attempted again on that device. ...