Skip to content
WARP Client
Visit WARP Client on GitHub
Set theme to dark (⇧+D)

macOS

Automated configuration (Jamf, Intune, Script)

The Cloudflare WARP macOS client allows for an automated install via tools like Jamf, Intune, or any script or management tool that can place a com.cloudflare.warp.plist file in /Library/Managed Preferences on a supported macOS device.

Here is an example plist file with the accepted arguments:

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict>    <key>organization</key>    <string>yourorganization</string>    <key>enable</key>    <true />    <key>gateway_unique_id</key>    <string>your_gateway_doh_subdomain</string>    <key>service_mode</key>    <string>warp</string>    <key>support_url</key>    <string>https://support.example.com</string></dict></plist>

For a description of each argument and what it means, see deployment parameters.

Click here to download this example plist. If you manually plan to download the plist file and place it in /Library/Managed Preferences, convert the plist into into binary format first. To do that:

  1. Open a Terminal window.
  2. Run the following command:
% plutil -convert binary1 com.cloudflare.warp.plist

Example configuration in Jamf

With Jamf, the WARP Client deployment is performed in three distinct steps:

  1. Upload the WARP Client pkg file.
  2. Create a policy that deploys the WARP Client pkg file.
  3. Create a configuration profile with the settings you want pushed down.

The following sections will walk you through each of these steps.

Upload the package

  1. Login to your jamfcloud.com account.
  2. Navigate to Computer.
  3. Click the All Settings (gear) in the upper right corner.
  4. Click Computer Management.
  5. Click Packages.
  6. Select New.
  7. Upload the Cloudflare_WARP.pkg file. For Display name, we recommend entering the version number of the package being uploaded.
  8. Click Save to complete the upload.

Create the policy

  1. Select Computers > Policies on the menu to your left.
  2. Click + New.
  3. Enter a Display name such as "Cloudflare WARP Client".
    For Triggers, our recommendation is to select Startup, Login, Enrollment Complete and Recurring Check-in, but you can select the value that works best for your organization.
  4. Navigate to Packages.
  5. Click Configure.
  6. Click Add next to the package you previously uploaded.
  7. Click Save.

Add Configuration Profile

  1. Navigate to Configuration Profiles.
  2. Click New.
  3. Enter a name for your new profile, such as Cloudflare for Teams.
  4. Scroll down the options list and click on Application & Custom Settings.
  5. Click Configure.
  6. Upload a valid plist file. You can start with our example above and modify for your organization.
  7. Click Save.
  8. Navigate to Scope to configure which devices in your organization should receive this profile.
  9. Click Save.

Jamf is now configured to deploy the Cloudflare WARP Client.

Manual configuration

If you plan to direct your users to manually download and configure the Cloudflare WARP Client application, they can do so in two ways, depending on your organization's Teams configuration:

Manually configure a Gateway DoH Subdomain

If your organization uses Gateway DNS filtering, you will need to instruct your users to configure the Gateway DoH Subdomain field. Follow these instructions to find this value for your Teams configuration.

Then ask your users to complete the following steps:

  1. Click on the Cloudflare Logo in the Menu Bar.
  2. Select the gear icon.
  3. Navigate to Preferences.
  4. Select the Connect tab.
  5. Click Change next to Gateway DoH Subdomain, and enter your DoH Subdomain.

Preferences UI in the connection tab with the Change button circled

Manually configure a Cloudflare for Teams device registration

If your organization uses Teams Access policies to control device registration, or is using the Gateway L7 Filtering and user or device specific Gateway policies, your users will need to login to Cloudflare for Teams by following these instructions:

  1. Click on the Cloudflare Logo in the Menu Bar.
  2. Select the gear icon.
  3. Navigate to Preferences.
  4. Select the Account tab.
  5. Click Login with Cloudflare for Teams.
  6. Enter your organization name (if your auth domain were https://example.cloudflareaccess.com, you would enter example).
  7. Complete the authentication steps required by your organization.

Preferences UI in the Account tab with the Login to Teams button circled