Skip to main content

Hi there,

I am noticing a number of machines not being able to check in when running 'sudo jamf recon' 

We are running 10.33, on prem

➜  ~ sudo jamf recon
Retrieving inventory preferences from https://xxx.xxx.co.uk:8443/...
Finding extension attributes...
Locating hard drive information...
Locating accounts...
Locating applications...
Locating package receipts...
Searching path: /System/Applications
Locating software updates...
Locating printers...
Gathering application usage information from the JamfDaemon...
Searching path: /Applications
Locating hardware information (macOS 11.6.0)...

 Is anyone else noticing this? 

Verbose shows the below, could be an EA that causes it to freeze?

 verbose: Timeout: 10
verbose: Checking availability of xxx...
verbose: The JSS is available.
Retrieving inventory preferences from xxx...
Finding extension attributes...
verbose: Running script for the extension attribute Admin users
Locating applications...
Locating accounts...
Searching path: /System/Applications
Locating package receipts...
Locating hard drive information...
Locating software updates...
Locating printers...
verbose: Locating running services...
Gathering application usage information from the JamfDaemon...
verbose: Gathering auto login user
verbose: Found app: /System/Applications/Siri.app
verbose: Found app: /System/Applications/Music.app
verbose: Found app: /System/Applications/FindMy.app
verbose: Found app: /System/Applications/QuickTime Player.app
verbose: Found app: /System/Applications/Chess.app
verbose: Found app: /System/Applications/Photo Booth.app
verbose: Found app: /System/Applications/Books.app
verbose: Found app: /System/Applications/Notes.app
verbose: Found app: /System/Applications/Image Capture.app
verbose: Found app: /System/Applications/Home.app
verbose: Found app: /System/Applications/Preview.app
verbose: Found app: /System/Applications/News.app
verbose: Found app: /System/Applications/TextEdit.app
verbose: Found app: /System/Applications/Podcasts.app
verbose: Found app: /System/Applications/TV.app
verbose: Found app: /System/Applications/Stocks.app
verbose: Found app: /System/Applications/Mail.app
verbose: Found app: /System/Applications/Dictionary.app
verbose: Found app: /System/Applications/Contacts.app
verbose: Found app: /System/Applications/Time Machine.app
verbose: Found app: /System/Applications/Utilities/AirPort Utility.app
verbose: Found app: /System/Applications/Utilities/VoiceOver Utility.app
verbose: Found app: /System/Applications/Utilities/Terminal.app
verbose: Found app: /System/Applications/Utilities/Activity Monitor.app
verbose: Found app: /System/Applications/Utilities/Screenshot.app
verbose: Found app: /System/Applications/Utilities/Grapher.app
verbose: Found app: /System/Applications/Utilities/Audio MIDI Setup.app
verbose: Found app: /System/Applications/Utilities/System Information.app
verbose: Found app: /System/Applications/Utilities/Keychain Access.app
verbose: Found app: /System/Applications/Utilities/Migration Assistant.app
verbose: Found app: /System/Applications/Utilities/Script Editor.app
verbose: Found app: /System/Applications/Utilities/ColorSync Utility.app
verbose: Found app: /System/Applications/Utilities/Console.app
verbose: Found app: /System/Applications/Utilities/Disk Utility.app
verbose: Found app: /System/Applications/Utilities/Bluetooth File Exchange.app
verbose: Found app: /System/Applications/Utilities/Boot Camp Assistant.app
verbose: Found app: /System/Applications/Utilities/Digital Color Meter.app
verbose: Found app: /System/Applications/Font Book.app
verbose: Found app: /System/Applications/FaceTime.app
verbose: Found app: /System/Applications/Maps.app
verbose: Running script for the extension attribute AWS CLI 1
verbose: Found app: /System/Applications/Mission Control.app
verbose: Found app: /System/Applications/Stickies.app
verbose: Found app: /System/Applications/Photos.app
verbose: Found app: /System/Applications/Messages.app
verbose: Found app: /System/Applications/Calculator.app
verbose: Found app: /System/Applications/VoiceMemos.app
verbose: Found app: /System/Applications/Launchpad.app
verbose: Found app: /System/Applications/Reminders.app
verbose: Found app: /System/Applications/App Store.app
verbose: Found app: /System/Applications/Automator.app
verbose: Found app: /System/Applications/Calendar.app
verbose: Found app: /System/Applications/System Preferences.app
Searching path: /Applications
verbose: Found app: /Applications/Visual Studio Code.app
verbose: Found app: /Applications/SourceTree.app
verbose: Found app: /Applications/Keybase.app
verbose: Found app: /Applications/Kaleidoscope.app
verbose: Found app: /Applications/Keka.app
verbose: Found app: /Applications/Tuple.app
verbose: Found app: /Applications/Remove Netskope Client.app
verbose: Found app: /Applications/Google Chrome.app
verbose: Found app: /Applications/Self Service.app
verbose: Found app: /Applications/Numbers.app
verbose: Found app: /Applications/Beyond Compare.app
verbose: Found app: /Applications/Microsoft Remote Desktop.app
verbose: Found app: /Applications/iMovie.app
verbose: Found app: /Applications/Citrix Workspace.app
verbose: Found app: /Applications/DBeaver.app
verbose: Running script for the extension attribute AWS CLI 2
verbose: Found app: /Applications/Microsoft Word.app
verbose: Found app: /Applications/Endpoint Security VPN.app
verbose: Found app: /Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app
verbose: Found app: /Applications/Cisco/Uninstall AnyConnect.app
verbose: Found app: /Applications/Microsoft Remote Desktop.localized/Microsoft Remote Desktop.app
verbose: Found app: /Applications/SQLDeveloper.app
verbose: Found app: /Applications/Navicat Premium 11.app
verbose: Found app: /Applications/Docker.app
verbose: Found app: /Applications/Grammarly for Safari.app
verbose: Found app: /Applications/CCMenu.app
verbose: Found app: /Applications/Safari.app
verbose: Found app: /Applications/Microsoft Excel.app
verbose: Found app: /Applications/Workplace Chat.app
verbose: Found app: /Applications/SecureCRT.app
verbose: Found app: /Applications/zoom.us.app
verbose: Found app: /Applications/Microsoft Outlook.app
verbose: Found app: /Applications/IntelliJ IDEA.app
verbose: Found app: /Applications/Keynote.app
verbose: Found app: /Applications/Check Point Firewall.app
verbose: Found app: /Applications/pgAdmin 4.app
verbose: Found app: /Applications/Authy Desktop.app
verbose: Found app: /Applications/Pages.app
verbose: Found app: /Applications/GarageBand.app
verbose: Found app: /Applications/VirtualBox.app
verbose: Found app: /Applications/1Password 7.app
verbose: Found app: /Applications/Jamf Connect.app
verbose: Found app: /Applications/Falcon.app
verbose: Found app: /Applications/Microsoft OneNote.app
verbose: Found app: /Applications/Kitematic.app
verbose: Found app: /Applications/iTerm.app
verbose: Found app: /Applications/Firefox.app
verbose: Found app: /Applications/DataGrip.app
verbose: Found app: /Applications/Postman.app
verbose: Found app: /Applications/Fotor Photo Editor.app
verbose: Found app: /Applications/Microsoft PowerPoint.app
verbose: Found app: /Applications/Evernote.app
verbose: Found app: /Applications/CompareMerge2.app
verbose: Found app: /Applications/Netskope Client.app
verbose: Found app: /Applications/Microsoft Teams.app
verbose: Found app: /Applications/Slack.app
verbose: Found app: /Applications/Sublime Text.app
verbose: Running script for the extension attribute Check if Domain joined
verbose: Running script for the extension attribute CrowdStrike
verbose: Running script for the extension attribute CrowdStrike Network Running Status
verbose: Running script for the extension attribute CrowdstrikeFalconAgentv6HearbeatCheckEA
verbose: Running script for the extension attribute CrowdstrikeFalconv6AgentIDEA
verbose: Running script for the extension attribute CrowdstrikeFalconv6ExtensionStatusEA
verbose: Running script for the extension attribute CrowdstrikeFalconv6ExtensionVersionEA
verbose: Running script for the extension attribute CrowdstrikeFalconv6LastEstablishedEA
verbose: Running script for the extension attribute CrowdstrikeFalconv6Sensorv2
verbose: Running script for the extension attribute Demobilization Status
verbose: Running script for the extension attribute Find my Mac
verbose: Running script for the extension attribute Homebrew
verbose: Running script for the extension attribute Krb5 Realm
verbose: Running script for the extension attribute Last User
verbose: Running script for the extension attribute Network Account enabled
verbose: Running script for the extension attribute Network Time Server
verbose: Running script for the extension attribute Oracle Java 8 JDKVersion
verbose: Finding CoreStorage information...
verbose: Running script for the extension attribute SecureToken Users
verbose: Running script for the extension attribute Uptime
Locating hardware information (macOS 11.6.0)...
verbose: Device is BLE capable: yes
verbose: Device is SIP protected: Enabled
verbose: Checking AD status...
verbose: Gatekeeper status: App Store and identified developers

 


We are having the exact same problem, stuck in the same spot, devices not checking in... I've been working with Jamf support for 3 weeks on this now with no resolution or even a cause. I just keep getting passed off to different people. 

Our temporary work around was to disable any policy that required recon... Not ideal.


So, I found that my inventory was set to 'once per computer' and not 'once per day' ... seems ok now but monitoring it


Yeah, same issue, comes back to haunt us after a reboot eventually


So our fix was updating to 12.0.1. No issues on the affected machines since updating.


I'm on 12.0.1 and facing this issue


I'm on 12.0.1 and facing this issue


Our issues started back last week with devices on 12.0.1.


We're facing this issue with 10.15.7 and I had one user with this issue running under 11.4, I told him to upgrade.

Also, it happened today on my Mac running under 11.6.1 and fixed once rebooted... we will se tomorrow.


Anyone have any luck with this? Haven't had much success with support.


I am seeing this on some machines as well. Haven't gotten a solid workaround yet.

Anybody get this figured out?

It hangs at "Gatekeeper status: App Store and identified developers"

 


Facing the same issue on all computers, however running

sudo jamf recon

locally works just fine, so I switched from using "Update Inventory" in Maintenance section of the policy to running a script which doesn't get stuck.


I am also facing the same issue. I've noticed a few things on my machines as well: 
1.) if the user is experience this, they also have issues checking for software updates. Clicking "System Preferences" - "Software Update" brings them to the "Checking For Updates" screen but it never finishes. 
2.) Upgrading to Monterey seems to fix the issue. 

 

Has anyone found a solution? We are running 10.35 


This will fix the issue with Software Updates 

sudo launchctl kickstart -k system/com.apple.softwareupdated
 
Did Monterey fix your checking in issue?

@kissland 
wow, that fixed our issue with software update I'm going to see if that fixes inventory updates. 

Can I ask how you knew the solution? I feel like the softwareupdate issue happened a week or so ago and I can't figure out what caused it. 

So far upgrading to Monterey has fixed it for the folks having the issue with recon/softwareupdate until you showed me this. 


I too noticed it a week or so ago, not sure what caused it. Someone mentioned it on MacAdmins Slack channel, a few others have this issue too. It has not solved the inventory problems though.


Running that command has also fixed our jamf recon issues on a few users I just tried it on. I just pinged my former colleagues and they said they are experiencing the same thing with recon/softwareupdates. I appreciate the fix it sounds like something is going on with Apple's Software Update servers. 


Thanks, @kissland !
I have verified that this command (sudo launchctl kickstart -k system/com.apple.softwareupdated) worked on our machines to fix the inventory updates. 
 
Before, I had to have the user restart their machine.

Perhaps "Gatekeeper status: App Store and identified developers" or something with recon relies on the Software Update daemon?

I'm so glad that there's another fix that doesn't require restarting the machine!


This looks like it potentially has fixed the issue... Ran this across a number of machines and the inventory is successful. Will continue to monitor.


Chiming in to say we have about ~60 users with this issue on 11.6.1. Recons don't run, and another symptom was that (even after a restart) a user could never successfully check for updates from the command line or in System Preferences.

I have an open ticket with Jamf right now and will send them this thread along with the info I have gathered. It's a frustrating issue to resolve, b/c we'll have to reach out to every user individually. I actually had `sudo launchctl kickstart -k system/com.apple.softwareupdated` in Self Service to resolve another `softwareupdate` issue from a year or so ago, but Self Service is not successful due to `recon` stalling out from a previous run.


I am also facing the same issue. I've noticed a few things on my machines as well: 
1.) if the user is experience this, they also have issues checking for software updates. Clicking "System Preferences" - "Software Update" brings them to the "Checking For Updates" screen but it never finishes. 
2.) Upgrading to Monterey seems to fix the issue. 

 

Has anyone found a solution? We are running 10.35 


Same, having users on 11.6.1 (who were unable to update to 11.6.2) upgrade to 12.1 resolved the issue.


Hey Everyone, 

 

I just wanted to give an update on what we are experiencing and how it might help you as well. 

1.) The SoftwareUpdate issue is still ongoing even after running  `sudo launchctl kickstart -k system/com.apple.softwareupdated`. It fixes it but the issue has came back on some machines. 

2.) This is critical: the reason your JAMF policies/recons are hanging is because JAMF Recon is, by default, set to collect software update information. If you go to Full JSS Settings - Inventory Collection - there will be a setting called "Collect Available Software Updates". If you turn this off, you will still have the "checking for updates" issue but at least your clients will be able to check-in. 

 

I don't have Apple reps or contacts but this seems like an Apple outage/degradation. Has anyone been able to pinpoint the cause for the "checking for updates" issue? I've reached out to several colleagues that are running JAMF and told them to look for this in their environment and surely enough they've found that their machines stopped checking in about 1-2 weeks ago. Further, JAMF Support told me they've received numerous cases about this. 


Been ssh-ing into about 80 machines the last couple days to fix this. I love Jamf, but dang I hate Jamf sometimes.


This will fix the issue with Software Updates 

sudo launchctl kickstart -k system/com.apple.softwareupdated
 
Did Monterey fix your checking in issue?

This worked for me. Thanks!


Just thought I'd chip in on this one having found the post after some head-scratching on why some machines hadn't been checking in!

Initially I tried the verbose recon on a users machine and it was also stalling at the Gatekeeper App store bit.

Ran the command to kickstart softwareupdate and then recon and it ran through fine!
The reboot bit got me thinking and I did a check on the machine I was working on and the last reboot (based on uptime) was around the time it stopped.


Just thought I'd chip in on this one having found the post after some head-scratching on why some machines hadn't been checking in!

Initially I tried the verbose recon on a users machine and it was also stalling at the Gatekeeper App store bit.

Ran the command to kickstart softwareupdate and then recon and it ran through fine!
The reboot bit got me thinking and I did a check on the machine I was working on and the last reboot (based on uptime) was around the time it stopped.


I have one machine with the same issue on Gatekeeper hang. Ran the above command to no avail, Restarted to no avail, Inventory is not set to collect available updates.


Reply