Safari Installation
Requirements
- macOS
- Distributed via App Store/MDM profile
- Deploy via MDM (VPP) or App Store
- Users must manually enable the extension in Safari per Apple requirements
MDM Dependancies
- Cyberhaven MDM profile Cyberhaven.mobileconfig version 2.0.6
- Apple VPP account integrated with your MDM (for Safari)
- Sufficient VPP licenses for macOS device fleet management
Safari Installation
Cyberhaven’s Safari browser extension is a macOS App Extension available with Endpoint Sensor version 22.11 and later. Deploy via your MDM using Apple Business/School Manager (VPP) or install from the App Store. Apple requires users to enable Safari extensions on the device.
- Requirements
- Safari Installation
- Safari Installation on macOS (MDM, VPP)
- Safari Installation using Jamf Pro
- Safari Installation using Kandji
- Safari Installation (Manual)
- Enable the Safari Extension
If issues are encountered please check the Browser Extensions Troubleshooting for information on how to troubleshoot.
Related Enforce extension state via Declarative Device Management (macOS Sequoia+):
Safari Installation on macOS (MDM, VPP)
Ensure VPP (Apps and Books) is integrated with your MDM.
- If you’ve previously deployed App Store apps via MDM, VPP is likely already configured.
In Apple Business Manager (ABM), locate “Cyberhaven Extension” in Apps and Books and Get licenses for your fleet.
Sync apps/licenses to your MDM by uploading or refreshing the Content (VPP) token.
Assign the Cyberhaven Safari Extension app to target devices via your MDM and deploy.
:::info Notes
- The extension app is free, but you must have sufficient licenses assigned for managed deployment.
- Apple requires users to enable Safari extensions on the device; see Enable the extension for end‑user steps. :::
Safari Installation using Jamf Pro
In Jamf Pro, go to Computers > Mac Apps and add the Cyberhaven Safari Extension app (Apps and Books).
In Scope, assign users or computers for automatic installation.
Save and deploy. Jamf will push the app to targeted macOS devices.
:::info Notes
- Ensure ABM/Apps and Books is integrated with Jamf and that sufficient licenses are available.
- Users must enable the extension on each device; see Enable the extension. :::
Safari Installation using Kandji
In Apple Business Manager (ABM), add the Cyberhaven Extension app to your Apps and Books library.
- Get and confirm to add the app; ensure licenses are available.
- If the app is already assigned in a different MDM, reassigning here can revoke those licenses.
Download the ABM Content token: ABM > Preferences > Payment and Billing > Content Tokens > Download.
In Kandji, go to Settings > Apple Integrations and upload the Content token.
In Kandji Library > App Store apps, search for Cyberhaven Extension and add it.
Under Blueprints, assign the blueprints that include all devices where you want the app installed, then Save.
Users must enable the extension on each device; see Enable the extension for steps.
Safari Installation (Manual)
Open Safari and choose Safari > Safari Extensions.
In the App Store window, search for “Cyberhaven Extension”.
Click Get > Install.
Enable the extension by following the steps in Enable the extension.
Enable the Safari Extension
Apple requires users to enable Safari extensions on each device.
Open Safari and go to Safari > Settings > Extensions.
Select Cyberhaven security extension to enable it.
When prompted, click Always allow on every website to grant necessary permissions.
Cyberhaven performs a self‑check to verify the extension is active.
:::info Important Notes
- The Share across devices checkbox may be enabled by default; managed extensions are not pushed to iOS devices.
- Starting with macOS Sequoia, you can manage the Safari extension state via Declarative Device Management (DDM). See: Manage Cyberhaven Safari Extension via Declarative Device Management (DDM).
- After granting permissions, users can still edit site‑specific permissions in Safari Settings. :::