Deploy Tailscale with JumpCloud
You can use the JumpCloud mobile device management (MDM) solution to deploy Tailscale across your organization. JumpCloud lets you distribute and install Tailscale automatically on your fleet of devices. You can then configure a number of system policies, and use JumpCloud to deploy these policies across the devices in your organization. Tailscale system policies via JumpCloud are supported on Windows, macOS, iOS/tvOS, and Android.
If you need help deploying Tailscale using JumpCloud, or would like to suggest any feature enhancements, contact our support or sales teams.
Deploying Tailscale on macOS using JumpCloud
To deploy Tailscale to a fleet of Macs managed via JumpCloud, follow these steps. You'll first configure JumpCloud to fetch and distribute the Tailscale .pkg
installer. Then, if needed, you'll be able to configure and deploy a set of system policies to customize the behavior of the Tailscale client according to the needs of your organization.
Distributing the Standalone variant of the client
Follow these steps to add Tailscale to the deployable apps in the JumpCloud admin console:
-
Log in to the JumpCloud admin console for your organization at
https://console.jumpcloud.com
. -
Navigate to Software Management in the sidebar, and then navigate to the Apple section to bring up your library of deployed macOS apps.
-
Select the + button at the top-left to add a new app. Choose the Self-hosted option, which lets you define a new application by providing a URL to a
.pkg
installer. -
In the Software Description field, enter Tailscale.
-
In the Software Package URL field, enter the download URL for the Tailscale installer, such as
https://pkgs.tailscale.com/stable/Tailscale-1.76.1-macos.pkg
. To determine the URL to use, navigate to our packages server to find the latest available version of the client. Replace1.76.1
with the current version number.
Do not use the autoupdating latest
download URL (https://pkgs.tailscale.com/stable/Tailscale-latest-macos.pkg
). Although this download URL will work initially, it will break as soon as Tailscale releases an update.
JumpCloud does not support URLs that reference changing .pkg
file versions. When the .pkg
file is updated from the original version configured in the JumpCloud admin console, package validation will fail.
- Select the Validate button to verify that JumpCloud is able to fetch the installer package. If successful, you'll see the version field populate with the version you chose.
Then, assign the Tailscale app to a device or a group of devices:
-
Navigate to either the Devices or Device Groups sections, and select one or more device or device groups that you wish to deploy Tailscale on.
-
Select Save to confirm the selection. After confirming, JumpCloud will begin to silently run the Tailscale
.pkg
installer on the devices or device groups you selected.
Deploying system policies on macOS using JumpCloud
We suggest reading the system policies topic to identify configuration options suitable for your organization. Once you know which policies you want to deploy to your fleet of devices, follow these steps to define them in JumpCloud:
-
Log in to the JumpCloud admin console for your organization at
https://console.jumpcloud.com
. -
Navigate to the Policy Management section in the sidebar.
-
Select the + button at the top-left of the view to add a new policy. In the modal window that appears, choose Mac.
-
In the list of available policy types, choose MDM Custom Configuration Profile, which will allow you to upload a custom
.mobileconfig
file. -
Choose a descriptive policy name and description (optional). For instance,
Tailscale System Policies
. -
In the Mobile Configuration File section, upload a
.mobileconfig
file containing your policies. You may find an example within our macOS MDM setup guide. -
Assign the policies to a group of devices or one or more device by selecting items in the Device Groups or Devices section respectively.
-
Select Save to save the policies. JumpCloud will begin deploying the configuration profile to selected devices momentarily. The Tailscale client must be restarted in order for all policies to be applied.