Custom file

Platform compatibility

macOS	Windows	Linux	iOS / iPadOS	Android
✅	✅		✅	✅

Set up the control

Go to MDM > Controls > Add new control

Select Custom file.

Upload your configuration file

Upload your configuration file. The file is delivered to devices via MDM in the same way as any other control.

Primo does not validate the contents of custom files. Ensure your configuration is correct before deploying — an invalid or conflicting profile may cause unexpected device behavior.

Give the control a descriptive name

Use a name that is easy to identify later.

Select targeting

Choose which devices to apply the control to: all devices, specific device groups, or a custom target.

How it works

Each platform accepts its native configuration format:

Platform	Format	Description
macOS	`.mobileconfig` or `.json`	Apple Configuration Profile (XML-based) or JSON
iOS / iPadOS	`.mobileconfig`	Apple Configuration Profile (XML-based)
Windows	`.xml`	Windows MDM custom policy (SyncML format)
Android	`.json`	Android Enterprise managed configuration

macOS
iOS / iPadOS
Windows
Android

macOS configuration profiles (.mobileconfig) are XML files, signed or unsigned, delivered as MDM payloads. macOS also supports .json for certain configuration payloads.To create profiles, the recommended tools are:

iMazing Profile Editor — free, purpose-built for creating and editing .mobileconfig files
Apple Configurator — available on the Mac App Store

Common use cases include custom certificate payloads, VPN profiles, and per-app VPN configurations.

iOS and iPadOS use the same .mobileconfig format as macOS.

Windows custom files use the SyncML format, which maps to Windows MDM CSPs (Configuration Service Providers). This allows you to configure any policy exposed by the Windows MDM stack that is not covered by Primo’s built-in controls.Write the XML starting and ending with <Replace> or <Add>: omit the SyncML header and footer lines.

Example: set the desktop and lock screen images

Allow personalization CSP on Windows Pro

<Replace>
  <!-- Allows Personalization CSPs to be deployed on non-Enterprise versions of Windows.
       Setting this value to true triggers the action to configure a device as education environment.
       Thorough testing is crucial to ensure it does not disrupt workflows or create compatibility issues. -->
  <Item>
    <Meta>
      <Format xmlns="syncml:metinf">bool</Format>
    </Meta>
    <Target>
      <LocURI>./Vendor/MSFT/SharedPC/SetEduPolicies</LocURI>
    </Target>
    <Data>true</Data>
  </Item>
</Replace>

Set the desktop and lock screen images

Personalization CSP is supported in Windows Enterprise and Education Editions. It works in Windows Professional only when SetEduPolicies in SharedPC CSP is set. See the previous example.

<Replace>
  <CmdID>1</CmdID>
  <Item>
    <Target>
      <LocURI>
        ./Vendor/MSFT/Personalization/LockScreenImageUrl
      </LocURI>
    </Target>
    <Meta>
      <Format xmlns="syncml:metinf">chr</Format>
      <Type>text/plain</Type>
    </Meta>
    <Data> … your URL here … </Data>
  </Item>
</Replace>
<Replace>
  <CmdID>2</CmdID>
  <Item>
    <Target>
      <LocURI>
        ./Vendor/MSFT/Personalization/DesktopImageUrl
      </LocURI>
    </Target>
    <Meta>
      <Format xmlns="syncml:metinf">chr</Format>
      <Type>text/plain</Type>
    </Meta>
    <Data> … your URL here … </Data>
  </Item>
</Replace>

SharedPC/SetEduPolicies switches the device into an education configuration. Test it on a few devices before a wider rollout.

Modify or remove the control

Open the control from MDM > Controls to edit or disable it. To change the configuration, re-upload the config file with updated settings. Disabling the control stops enforcement but does not remove existing configurations from devices.

Troubleshooting

The file upload fails

Confirm the file matches the expected format for the selected OS.
Check that the file is not corrupted or empty.
macOS profiles must use valid XML — validate the file with plutil -lint profile.mobileconfig.

Welcome to Primo

Platform configuration

Onboardings & Offboardings

AI Agents

Helpdesk

Device Management

Endpoint Protection

SaaS Management

Global Purchasing

Platform compatibility

Set up the control

How it works

Allow personalization CSP on Windows Pro

Set the desktop and lock screen images

Modify or remove the control

Troubleshooting

​Platform compatibility

​Set up the control

​How it works

​Allow personalization CSP on Windows Pro

​Set the desktop and lock screen images

​Modify or remove the control

​Troubleshooting

Platform compatibility

Set up the control

How it works

Allow personalization CSP on Windows Pro

Set the desktop and lock screen images

Modify or remove the control

Troubleshooting