Skip to main content
Question

Bootstrap token extension attribute

  • Feb 24, 2020 11:11 PM UTC
  • 10 replies
  • 141 views

Forum|alt.badge.img+15

I'm happy to see bootstrap token support in Jamf 10.19, but I only want to run profiles install -type bootstraptoken for users that don't have a token escrowed. I couldn't find an existing EA here to help scope my policy, so I put one together. Hopefully someone finds this useful :)

#!/bin/bash

tokenStatus=$(profiles status -type bootstraptoken | awk '{ print $7 }' | sed 1d)

if [ $tokenStatus == "NO" ]; then
    echo "<result>Not escrowed</result>"
elif [ $tokenStatus == "YES" ]; then
    echo "<result>Escrowed</result>"
else
    echo "<result>Unknown status</result>"
fi

10 replies

Forum|alt.badge.img+12
  • Valued Contributor
  • Feb 25, 2020 6:03 PM UTC

@sshort Thanks for sharing your script for this. :)


Forum|alt.badge.img+11
  • Valued Contributor
  • Nov 11, 2020 5:23 AM UTC

Thanks!!


Forum|alt.badge.img+1
  • New Contributor
  • Nov 12, 2020 8:38 PM UTC

Great 👍


A-bomb
Forum|alt.badge.img+8
  • Contributor
  • Nov 13, 2021 12:46 AM UTC

Just what I was looking for! Thank you  😀


Forum|alt.badge.img+1
  • New Contributor
  • Nov 23, 2021 9:46 PM UTC

what do you mean by "unknown status"


Forum|alt.badge.img+5
  • Contributor
  • Mar 14, 2022 6:36 PM UTC

Doesn't seem to work on Monterey


A-bomb
Forum|alt.badge.img+8
  • Contributor
  • Mar 14, 2022 6:42 PM UTC

Doesn't seem to work on Monterey


12.3? Works fine for us on 12.0–12.2.1.


Forum|alt.badge.img+5
  • Contributor
  • Mar 14, 2022 6:53 PM UTC

12.3? Works fine for us on 12.0–12.2.1.


Maybe I'm doing something wrong... It's blank.


Forum|alt.badge.img+5
  • Contributor
  • Mar 14, 2022 7:24 PM UTC

Maybe I'm doing something wrong... It's blank.


ok never mind, it just takes time to appear. Thx


Forum|alt.badge.img+12
  • Contributor
  • Sep 9, 2022 2:13 PM UTC

Is there a feature request to USE THE BUILT IN INVENTORY ITEM as a searchable criteria in either smart group or advanced search?

Seems ludicrous that we need to create an EA for something that is already reported in the inventory of a computer.