Securly Classroom macOS Agent (Beta)

Overview

Securly Classroom now supports macOS devices, allowing educators to monitor student screens, manage web access, and control application usage. This guide outlines the steps to install and verify the Securly Classroom macOS agent using FileWave.

Why Use the Securly Classroom macOS Agent?

The macOS agent enables:

Installation Steps

1. Deploy the MDM Privacy Profile

Before installing the Securly Classroom agent, you must configure the necessary Privacy Preferences Policy Control (PPPC) profile via FileWave MDM. This profile ensures the agent has permissions to:

There are two profiles available from Securly, allowing two deployment options:

Admin Only: In this scenario, admins would update each device to ensure that students are unable to change this permission. This is labor-intensive but locked down.

Admin or Students: In this scenario, teachers instruct students on how to enable this permission. Please note that in this configuration, students will then be able to remove this permission. Such matters should be handled by instructing students in your district’s Acceptable Use Policy. This scales more easily, but it requires coordination.

Please note: Screen recording policy follows Apple's privacy policy. Any user can agree to allow screen recording for the application, disable screen recording services, and revoke FileWave's right to view the screen, as per Apple Inc. policy.

Ensure this profile is deployed before proceeding with the PKG installation. Securly Classroom macOS Fileset has a placeholder for the PKG installer and a requirement script to check TCC Profile is installed before the PKG installation.

Securly Classroom macOS.fileset.zip

Requirement Script:

Where software is already installed and services are active, Privacy Settings Profiles installed subsequently require the service of that software to be restarted.  This Fileset example includes a Requirement Script that checks for profile installation before activating Securly, preventing the need to restart the service.

The 'check_profile.sh' script is designed to recognise one of the two provided Profiles and, once installed, allow activation of the Fileset.  If Profiles with a different Profile ID are used instead of those supplied, the script settings will require alteration.

The Launch Arguments display the Payload ID of the TCC profile. Add in the correct Fileset Profile UDID.

Fileset Contents Check Profile script Enter the TCC Profile UDID
SecurlyClassroommacOS.png RequirementTCCProfile.png ReplaceUDID.png

2. Obtain and Deploy the PKG Installer/Profile

Once the MDM profile is installed:

  1. Download the Securly Classroom macOS agent PKG from Securly.
  2. Import the PKG into the Fileset using FileWave to a few test devices.
  3. Reboot the device after installation, or require a reboot in the Fileset's properties (Reboot is required by Securly)
  4. Verify installation by checking for the Securly Classroom icon in the menu bar.
  5. Deploy the Fileset to your student devices.

3. Update Student Account Information

4. Configure Device Settings

Adjust parental controls or additional security settings to ensure Securly Classroom is always allowed.

Additional Considerations

For further assistance, refer to Securly's official guide.


Revision #10
Created 18 March 2025 15:28:12 by Andrew Kloosterhuis
Updated 2 May 2025 15:45:17 by Josh Levitsky