> ## Documentation Index
> Fetch the complete documentation index at: https://docs.quintai.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Roll out with Mosyle

> Deploy a Quint install package to Mosyle-managed Macs: two custom profiles, then the installer added by its public link, in two passes so the system extensions stay prompt-free.

At the end of this page every Mac you assign in Mosyle has Quint installed, both system extensions approved without a prompt, and is joined to your organisation. For what each file does, see [Roll out with MDM](https://docs.quintai.dev/install/mdm.md).

> [!NOTE]
>
> Mosyle is partly tested: the approvals profile and the installer have been pushed through Mosyle with no click on the Mac. If any step needed a click on the Mac, tell Quint support.

## Before you start

* Macs on macOS 14 or later, enrolled in Mosyle with user-approved MDM or Automated Device Enrollment.
* A Mosyle account that can add custom profiles and install packages. If **Custom Profiles** is not under **Management**, add it first from Mosyle's **Additional Profiles Marketplace**.
* The **Admin** or **Owner** role in the Quint dashboard, to make the package.

Mosyle has no way to make a profile land before a package. So you work in two passes: assign both profiles, confirm they reached a Mac, and only then assign the installer.

**1. Make the package**

In Quint, open **Add machines**. Choose **Mac**, then **A device management tool (MDM)**, then **Mosyle**, and name the package for the group. Click **Make my files** and download `quint-approvals.mobileconfig` and the `quint-enrollment-….mobileconfig` file. You don't need to download the installer: Mosyle fetches it from its link. See [Add machines](https://docs.quintai.dev/install/add-machines.md).

**2. Add the approvals profile**

In Mosyle, open **Management › Custom Profiles** and click **Add new profile**. If **Custom Profiles** is not listed, add it from Mosyle's **Additional Profiles Marketplace** first, then come back here. Name it "Quint approvals" and select `quint-approvals.mobileconfig`.

* Turn off **Enable Variables for this profile**. The profile has no Mosyle variables, and nothing in it may be changed.
* Keep **Profile Scope** at **System (Default)**. Quint's settings are for the whole Mac; a user scope does not deliver them.
* Assign it to the Macs you are adding, then **Save**. Mosyle installs it on save.

**3. Add the enrollment profile**

Add a second custom profile the same way. Name it "Quint enrollment", select the `quint-enrollment-….mobileconfig` file, use the same settings, and assign it to the same Macs.

**4. Confirm the profiles landed**

On one assigned Mac, open **System Settings › General › Device Management** (on macOS 14, **Privacy & Security › Profiles**). "Quint approvals" and "Quint enrollment" are listed. Wait for this before you assign the installer.

**5. Add the installer by its link**

Open **Management › Install PKG**. On the **PKGs** tab, click **Add new package**, choose **Already have a .pkg**, then **Next**. Paste the installer's public link:

```text theme={"dark"}
https://quint-releases-public.s3.amazonaws.com/v1.1.30/quint-v1.1.30.pkg
```

Tick **This app is Signed**, then click **Add enterprise app**. Mosyle reads the app's name and version from the installer. The installer is the same for every organisation; the wizard's **Mac installer** row shows the current version.

**6. Assign the installer**

On the **Profiles** tab of **Install PKG**, click **Add new profile**, name it, and add the Quint app. This **Profile** is the installer profile: it tells Mosyle which Macs get the package. It is not a custom profile, and it does not replace the two you added under **Custom Profiles**. Tick **Install with Apple Protocol**, assign it to the same Macs, then **Save**.

**7. Verify each machine**

The wizard's **First computer** step shows the first Mac's checks. Then open **Data Sources**: each Mac appears under **Telemetry by host** with its **Capture layers** and **Last seen**. [Verify a machine](https://docs.quintai.dev/install/verify-and-troubleshoot.md) explains each state.

## After the rollout

A package admits new computers for one year from the day it is made, up to its limit. [Machines & licensing](https://docs.quintai.dev/settings/machines-and-licensing.md) shows both. When it is full, expired or stopped, make a new package and replace the "Quint enrollment" profile's file in Mosyle with the new one. The approvals profile and the installer stay as they are.

## If this fails

| What you see | What it means | What to do |
| - | - | - |
| macOS prompts to allow a system extension | The installer landed before the approvals profile | Confirm "Quint approvals" is under **System Settings › General › Device Management** (on macOS 14, **Privacy & Security › Profiles**), then log out and back in. |
| Mosyle refuses the installer with "all enterprise apps must be signed" | **This app is Signed** was not ticked | Add the package again with **This app is Signed** ticked. |
| Mosyle shows no install for a Mac | The Mac already reports the same or a newer Quint version, for example from an install by hand | Remove Quint from that Mac first; see [Remove a machine](https://docs.quintai.dev/install/remove-a-machine.md). |
| A Mac installs but never appears in **Data Sources** | The installer landed before the enrollment profile, or the package is no longer **Active** | Confirm "Quint enrollment" is on the Mac, then install the package on that Mac again. Check the package in [Machines & licensing](https://docs.quintai.dev/settings/machines-and-licensing.md). |

## Remove the endpoint

Remove the endpoint first, while both Quint profiles are still assigned, and unassign the profiles last. See [Remove a machine](https://docs.quintai.dev/install/remove-a-machine.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.