Deploy the SURF browser extension to managed Macs using Kandji, with configuration profiles built in the iMazing Profile Editor. Google Chrome and Arc are both covered.
Before you start
| Requirement | Detail |
|---|
| iMazing Profile Editor | Installed on your Mac. Download it from the official site if needed. |
| Kandji access | Access to the Kandji admin portal with rights to add Library items |
| Extension ID | The SURF extension ID from the Chrome Web Store |
Step 1: Create the configuration profile for Chrome
- Launch the iMazing Profile Editor.
- Click File → New Profile and set the platform to macOS.
- Navigate to the Google Chrome managed settings section.
- Locate the setting ExtensionInstallForcelist and click + to add an entry.
- Enter the details:
| Field | Value |
|---|
| Extension ID | dpjmcncaehmgiefclapmfaenmibeca, or the SURF extension ID for your tenant |
| Update URL | Leave blank unless supplied by the extension developer |
- Click File → Save and save the profile as a
.mobileconfig file.
Step 2: Upload the profile to Kandji
- Log in to the Kandji admin portal.
- Go to Library → Add New → Configuration Profile.
- Upload the
.mobileconfig file saved in Step 1. - Scope the profile to the appropriate devices or groups.
- Save and apply the changes.
Step 3: Deploy for the Arc browser
Arc uses the same Chrome policy structure under a different payload type, so the profile is duplicated and one value changed.
- In iMazing Profile Editor, open the Chrome profile from Step 1 and save a duplicate under a new name.
- Open the duplicated
.mobileconfig in a text editor. - Find the
PayloadType key and change its value:
| From | To |
|---|
com.google.Chrome | company.thebrowser.Browser |
- Save the modified file.
- Upload and scope it in Kandji following Step 2.
Verification
- Open Google Chrome or Arc on a managed device.
- Confirm the SURF extension installed automatically, without user interaction.
- Confirm users cannot remove or disable it.
Troubleshooting
| Symptom | Check |
|---|
| Extension does not appear | The extension ID is wrong, the profile is not scoped to the device, or the browser does not support managed extensions |
| Chrome works but Arc does not | PayloadType was not changed to company.thebrowser.Browser in the duplicated profile |
For anything not covered here, contact the SURF support team.
