{"slug":"deploy-tailscale-with-jamf-pro","title":"Deploy Tailscale with Jamf Pro","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Deploy Tailscale with Jamf Pro\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nThis integrationis available for [the Standard, Premium, and Enterprise plans](https://tailscale.com/pricing).\r\n\r\nYou can use the [Jamf Pro](https://www.jamf.com/products/jamf-pro) mobile device management (MDM) solution to deploy Tailscale across your organization. Jamf Pro lets you distribute and install Tailscale automatically on your fleet of devices. You can then configure a number of [system policies](https://tailscale.com/docs/features/tailscale-system-policies), and use Jamf Pro to deploy these policies across the devices in your organization. Tailscale system policies through Jamf Pro are supported on macOS and iOS.\r\n\r\nIf you need help deploying Tailscale using Jamf Pro, or would like to suggest any feature enhancements, contact our [support](https://tailscale.com/contact/support#support-form) or [sales](https://tailscale.com/contact/sales) teams.\r\n\r\n## [Distributing Tailscale using Jamf Pro](https://tailscale.com/docs/integrations/mdm/jamf\\#distributing-tailscale-using-jamf-pro)\r\n\r\nSee [Deploy Tailscale on macOS using MDM](https://tailscale.com/docs/integrations/mdm/mac) for general best practices and [Approve the Tailscale system extension automatically](https://tailscale.com/docs/integrations/mdm/mac#approve-the-tailscale-system-extension-automatically) to ensure the best end-user experience.\r\n\r\nYou can distribute Tailscale on the devices in your fleet using Jamf Pro. You can choose to deploy either the Mac App Store variant of the client, or the Standalone variant. You can find more information on the differences between the two variants at [Three ways to run Tailscale on macOS](https://tailscale.com/docs/concepts/macos-variants).\r\n\r\n### [Distributing the Mac App Store variant of the client](https://tailscale.com/docs/integrations/mdm/jamf\\#distributing-the-mac-app-store-variant-of-the-client)\r\n\r\n1. Login to the Jamf Pro admin console for your organization at `.jamfcloud.com`.\r\n\r\n2. Select **Computers** in the sidebar, and then **Mac Apps** in the **Content Management** section. Move to the **App Store** tab.\r\n\r\n3. Select the **New** button at the top-right to add a new app.\r\n![The Mac Apps view in the Jamf Pro admin console.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-1.14466b3a.png&w=1080&q=75)\r\n4. Choose **Mac App Store** as the source for the app.\r\n![Selecting the Mac App Store option.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-2.935fc0b4.png&w=1080&q=75)\r\n5. Search for **Tailscale** in the App Store for your current region.\r\n![Searching for Tailscale in the App store for a specific region.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-3.58bb6e6a.png&w=1080&q=75)\r\n6. Select the **Add** button for the Tailscale app in the search results.\r\n![Add Tailscale as an app.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-4.cb440352.png&w=1080&q=75)\r\n7. Set up any deployment options as needed, especially in the **Scope** tab.\r\n![View of deployment options.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-5.3bdb490a.png&w=1080&q=75)\r\n8. Tailscale should now be available in the Self Service app across your fleet.\r\n![View of Tailscale in the Self Service app.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-app-store-6.518a278e.png&w=1080&q=75)\r\n\r\n## [Deploying system policies using Jamf Pro](https://tailscale.com/docs/integrations/mdm/jamf\\#deploying-system-policies-using-jamf-pro)\r\n\r\nWe suggest reading the [system policies](https://tailscale.com/docs/features/tailscale-system-policies) topic to identify configuration options suitable for your organization. Once you know which policies you want to deploy to your fleet of devices, follow these steps to define them in Jamf:\r\n\r\n01. Login to the Jamf Pro admin console for your organization at `.jamfcloud.com`.\r\n\r\n02. Select **Computers** in the sidebar, and then **Configuration Profiles** in the **Content Management** section.\r\n ![The Configuration Profiles settings.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-1.33fe6f62.png&w=1080&q=75)\r\n03. Select the **New** button at the top-right to create a new configuration profile.\r\n\r\n04. Enter a descriptive display name for the profile such as _Tailscale System Policies_.\r\n ![A new configuration profile with the name Tailscale System Policies.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-2.587cdbd2.png&w=1080&q=75)\r\n05. Select **Application & Custom Settings**, and then choose **External Applications** in the dropdown that appears.\r\n ![External Applications settings.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-3.2033db69.png&w=1080&q=75)\r\n06. Select the **Add** button at the top-right to add a new preference domain.\r\n\r\n07. Choose **Custom Schema** as the source to use for the preference domain.\r\n\r\n08. Enter the proper name for the preference domain, which matches the bundle identifier of the Tailscale client. If you're using the Mac App Store variant of Tailscale, enter `io.tailscale.ipn.macos`. If you're using the Standalone variant, enter `io.tailscale.ipn.macsys`.\r\n\r\n09. Select **Add Schema** to provide a JSON schema.\r\n ![External Applications settings for a Tailscale macOS variant.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-4.0a93a23a.png&w=1080&q=75)\r\n10. In the modal window that appears, select **Upload** to provide the latest version of the Tailscale JSON schema. The ProfileManifestsMirror project provides up-to-date versions of the Tailscale profile manifest compatible with the Jamf JSON schema. You can download them from [`io.tailscale.ipn.macos.json`](https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManagedPreferencesApplications/io.tailscale.ipn.macos.json) for the Mac App Store variant of the client, and from [`io.tailscale.ipn.macsys.json`](https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManagedPreferencesApplications/io.tailscale.ipn.macsys.json) for the Standalone variant. Upload the file to Jamf Pro once you have downloaded it from GitHub.\r\n ![Tailscale JSON schema for a Tailscale macOS variant.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-6.103051f7.png&w=1080&q=75)\r\n11. After uploading the JSON file, Jamf Pro will display a user interface to configure the Tailscale system policies. Complete the form by providing values for any policies you would like to set up.\r\n ![Tailscale system policies options.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-7.669a0729.png&w=1080&q=75)\r\n12. Remember to select the deployment scope for your configuration policies in the **Scope** tab. You may select **All Computers** as **Target Computers** to deploy the policies to all Macs in your organization.\r\n ![Tailscale system policies scope.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fjamf-policies-8.ca54b316.png&w=1080&q=75)\r\n13. Select **Save** to save the configuration profile and begin deploying the policies. The Tailscale client must be restarted in order for all policies to be applied.\r\n\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"

Deploy Tailscale with Jamf Pro

\n

Last validated: Jan 5, 2026

\n

This integrationis available for the Standard, Premium, and Enterprise plans.

\n

You can use the Jamf Pro mobile device management (MDM) solution to deploy Tailscale across your organization. Jamf Pro lets you distribute and install Tailscale automatically on your fleet of devices. You can then configure a number of system policies, and use Jamf Pro to deploy these policies across the devices in your organization. Tailscale system policies through Jamf Pro are supported on macOS and iOS.

\n

If you need help deploying Tailscale using Jamf Pro, or would like to suggest any feature enhancements, contact our support or sales teams.

\n

Distributing Tailscale using Jamf Pro

\n

See Deploy Tailscale on macOS using MDM for general best practices and Approve the Tailscale system extension automatically to ensure the best end-user experience.

\n

You can distribute Tailscale on the devices in your fleet using Jamf Pro. You can choose to deploy either the Mac App Store variant of the client, or the Standalone variant. You can find more information on the differences between the two variants at Three ways to run Tailscale on macOS.

\n

Distributing the Mac App Store variant of the client

\n
    \n
  1. \n

    Login to the Jamf Pro admin console for your organization at <companyName>.jamfcloud.com.

    \n
    2. \n
  2. \n

    Select Computers in the sidebar, and then Mac Apps in the Content Management section. Move to the App Store tab.

    \n
    3. \n
  3. \n

    Select the New button at the top-right to add a new app.\r\n\"The

    \n
    4. \n
  4. \n

    Choose Mac App Store as the source for the app.\r\n\"Selecting

    \n
    5. \n
  5. \n

    Search for Tailscale in the App Store for your current region.\r\n\"Searching

    \n
    6. \n
  6. \n

    Select the Add button for the Tailscale app in the search results.\r\n\"Add

    \n
    7. \n
  7. \n

    Set up any deployment options as needed, especially in the Scope tab.\r\n\"View

    \n
    8. \n
  8. \n

    Tailscale should now be available in the Self Service app across your fleet.\r\n\"View

    \n
    9. \n
\n

Deploying system policies using Jamf Pro

\n

We suggest reading the system policies topic to identify configuration options suitable for your organization. Once you know which policies you want to deploy to your fleet of devices, follow these steps to define them in Jamf:

\n
    \n
  1. \n

    Login to the Jamf Pro admin console for your organization at <companyName>.jamfcloud.com.

    \n
    2. \n
  2. \n

    Select Computers in the sidebar, and then Configuration Profiles in the Content Management section.\r\n\"The

    \n
    3. \n
  3. \n

    Select the New button at the top-right to create a new configuration profile.

    \n
    4. \n
  4. \n

    Enter a descriptive display name for the profile such as Tailscale System Policies.\r\n\"A

    \n
    5. \n
  5. \n

    Select Application & Custom Settings, and then choose External Applications in the dropdown that appears.\r\n\"External

    \n
    6. \n
  6. \n

    Select the Add button at the top-right to add a new preference domain.

    \n
    7. \n
  7. \n

    Choose Custom Schema as the source to use for the preference domain.

    \n
    8. \n
  8. \n

    Enter the proper name for the preference domain, which matches the bundle identifier of the Tailscale client. If you're using the Mac App Store variant of Tailscale, enter io.tailscale.ipn.macos. If you're using the Standalone variant, enter io.tailscale.ipn.macsys.

    \n
    9. \n
  9. \n

    Select Add Schema to provide a JSON schema.\r\n\"External

    \n
    10. \n
  10. \n

    In the modal window that appears, select Upload to provide the latest version of the Tailscale JSON schema. The ProfileManifestsMirror project provides up-to-date versions of the Tailscale profile manifest compatible with the Jamf JSON schema. You can download them from io.tailscale.ipn.macos.json for the Mac App Store variant of the client, and from io.tailscale.ipn.macsys.json for the Standalone variant. Upload the file to Jamf Pro once you have downloaded it from GitHub.\r\n\"Tailscale

    \n
    11. \n
  11. \n

    After uploading the JSON file, Jamf Pro will display a user interface to configure the Tailscale system policies. Complete the form by providing values for any policies you would like to set up.\r\n\"Tailscale

    \n
    12. \n
  12. \n

    Remember to select the deployment scope for your configuration policies in the Scope tab. You may select All Computers as Target Computers to deploy the policies to all Macs in your organization.\r\n\"Tailscale

    \n
    13. \n
  13. \n

    Select Save to save the configuration profile and begin deploying the policies. The Tailscale client must be restarted in order for all policies to be applied.

    \n
    14. \n
\n

\"Project

\n

Ask AI

\n

reCAPTCHA

\n

Recaptcha requires verification.

\n

protected by reCAPTCHA

\n"}