--- title: How to deploy Orchard with Jamf Pro description: Learn how to deploy Orchard to macOS devices using Jamf Pro, including package installation, enrollment scripts, and automated deployment policies. --- [Skip to content](https://resources.the-orchard.io/enrollment/jamf-pro#main-content) [![Orchard WordMark - White - Final - SVG](https://resources.the-orchard.io/hubfs/Orchard%20WordMark%20-%20White%20-%20Final%20-%20SVG.svg)](https://the-orchard.io/) - [Home](https://the-orchard.io/) - [Why Orchard?](https://the-orchard.io/info/why-us) - [Trust Center](https://trust.the-orchard.io/) - [Pricing](https://the-orchard.io/info/pricing) - [Become a Partner](https://the-orchard.io/info/partner) Open main navigation Close main navigation - [Home](https://the-orchard.io/) - [Why Orchard?](https://the-orchard.io/info/why-us) - [Trust Center](https://trust.the-orchard.io/) - [Pricing](https://the-orchard.io/info/pricing) - [Become a Partner](https://the-orchard.io/info/partner) - [Contact us](mailto:hello@the-orchard.io) [Contact us](mailto:hello@the-orchard.io) How can we help you? - There are no suggestions because the search field is empty. 1. [Orchard Knowledge Base](https://resources.the-orchard.io/?hsLang=en-gb) 2. [Device Enrollment](https://resources.the-orchard.io/device-enrollment?hsLang=en-gb) 26 October 2026 # How to deploy Orchard with Jamf Pro ## Learn how to deploy and enroll Orchard on macOS devices using Jamf Pro, including uploading the installation package, configuring an enrollment script, and creating a deployment policy. ### How to Deploy Orchard Using Jamf Pro Overview This guide explains how to deploy Orchard to macOS devices using Jamf Pro. You'll upload the Orchard installation package, create an enrollment script, and configure a Jamf Pro policy to automatically install and enroll Orchard on your chosen devices. Once configured, Jamf Pro will deploy Orchard during the device's next eligible check-in. #### Prerequisites Before getting started, ensure you have: - Access to a Jamf Pro instance with permissions to manage packages, scripts and policies. - The latest Orchard installation package (`.pkg`). - Your Orchard enrollment secret, generated from your Orchard instance. - macOS devices enrolled in Jamf Pro and eligible to receive policies. **Need the Orchard package or an enrollment secret?** See [Getting Started](https://resources.the-orchard.io/how-to-enroll-devices?hsLang=en-gb) for instructions on downloading the installation package and generating your enrollment secret. #### Step by Step Step 1: Upload the Orchard Package 1. Sign in to your **Jamf Pro** instance. 2. Navigate to **Settings → Computer Management → Packages**. 3. Click **New** to create a package. 4. Enter a descriptive display name, such as `Orchard`. 5. Under **Filename**, click **Browse for a file** and select your downloaded Orchard `.pkg` file. 6. Click **Save**. *![Jamf-Package](https://resources.the-orchard.io/hs-fs/hubfs/Jamf-Package.png?width=670&height=413&name=Jamf-Package.png)* Step 2: Create the Orchard Enrollment Script Next, create a script that will enroll the device into your Orchard instance after installation. 1. Navigate to **Settings → Computer Management → Scripts**. 2. Click **New**. 3. Under the **General** tab, enter `Orchard Enrollment` as the display name. 4. Select the **Script** tab. 5. Ensure the script language is set to **Shell/Bash**. 6. Paste the following script into the editor: ``` #!/bin/zsh orchard enroll --secret "" ``` 1. Replace `` with the enrollment secret generated in Orchard. Keep the surrounding double quotation marks. 2. Click **Save**. **Important:** Treat your Orchard enrollment secret as sensitive information. Ensure only authorised administrators can view or modify the script in Jamf Pro. ![Jamf-Script-2](https://resources.the-orchard.io/hs-fs/hubfs/Jamf-Script-2.png?width=670&height=412&name=Jamf-Script-2.png) Step 3: Create a Deployment Policy Now create a policy that installs the Orchard package and executes the enrollment script. 1. Navigate to **Computers → Policies**. 2. Click **New**. 3. Under **General**, provide a descriptive policy name, such as `Install and Enroll Orchard`. 4. Select **Packages** from the policy payload list. 5. Click **Configure** (if shown), then **Add**. 6. Select the Orchard package you uploaded earlier. 7. Ensure the package action is set to **Install**. *![Jamf-Add-Package](https://resources.the-orchard.io/hs-fs/hubfs/Jamf-Add-Package.png?width=670&height=216&name=Jamf-Add-Package.png)* Step 4: Add the Enrollment Script 1. Within the same policy, select **Scripts** from the payload list. 2. Click **Configure** (if shown), then **Add**. 3. Select the `Orchard Enrollment` script created in Step 2. 4. Set the script **Priority** to **After**. Setting the priority to **After** ensures the enrollment script runs after the package installation phase, so the Orchard command-line tool is available when enrollment is attempted. *![Jamf-Add-Script](https://resources.the-orchard.io/hs-fs/hubfs/Jamf-Add-Script.png?width=670&height=373&name=Jamf-Add-Script.png)* Step 5: Configure the Deployment Scope 1. Select the **Scope** tab. 2. Choose the computers or computer groups you want to deploy Orchard to. 3. Review the selected scope to ensure that only your intended devices are targeted. **Recommendation:** Test the policy on a small group of devices before deploying Orchard across your wider fleet. Step 6: Configure Policy Execution Finally, configure when Jamf Pro should execute the deployment policy. 1. Return to the **Options → General** section of the policy. 2. Under **Trigger**, select **Recurring Check-In**. 3. Set **Execution Frequency** to **Once per computer**. 4. Click **Save**. These settings allow Jamf Pro to install and enroll Orchard once per targeted computer during an eligible recurring check-in. ![Jamf-Execution](https://resources.the-orchard.io/hs-fs/hubfs/Jamf-Execution.png?width=670&height=435&name=Jamf-Execution.png) Step 7: Verify Deployment Once the policy has been saved, devices within the selected scope will be eligible to receive Orchard at their next Jamf Pro recurring check-in. To verify deployment: 1. In Jamf Pro, review the policy logs to confirm the installation and enrollment script completed successfully. 2. Sign in to your Orchard instance. 3. Confirm the targeted devices are appearing in Orchard. **Deployment complete!** Orchard should now be installed and enrolled on your targeted macOS devices. Additional devices added to the policy scope will also be eligible for deployment during their next check-in, provided they have not already executed the policy. - [Getting Started](https://resources.the-orchard.io/getting-started?hsLang=en-gb) - [Device Enrollment](https://resources.the-orchard.io/device-enrollment?hsLang=en-gb) - [App Patching](https://resources.the-orchard.io/app-patching?hsLang=en-gb) - [Billing & Subscriptions](https://resources.the-orchard.io/billing-subscriptions?hsLang=en-gb) - [Home](https://the-orchard.io/) - [Why Orchard?](https://the-orchard.io/info/why-us) - [Trust Center](https://trust.the-orchard.io/) - [Pricing](https://the-orchard.io/info/pricing) - [Become a Partner](https://the-orchard.io/info/partner) [![Orchard O - Leaf](https://resources.the-orchard.io/hs-fs/hubfs/Orchard%20O%20-%20Leaf.png?width=79&height=75&name=Orchard%20O%20-%20Leaf.png "Orchard O - Leaf")](https://the-orchard.io) [mailto:hello@the-orchard.io](mailto:hello@the-orchard.io) Copyright © 2026,