Since NoMad has stopped working with the new macOS 26, we are looking for its replacement.We tried implementing JAMF Connect, but since we use ADFS, JAMF Connect is not compatible.Can anyone suggest any other replacement for NoMad, which can work as a password sync between Mac devices and our Entra environment.Thanks

Hello, I’m hoping someone has some insight into this issue. I have two internal distribution points that run on Mac minis. They have both been up and running for several years. Recently, one of them stopped working after I renewed the SSL certificate. I accidentally let the certificate expire by less than a day. Now, after renewing the certificate, I can’t get it to serve files over HTTPS anymore.  Here’s what I have done so far:- Renewed the certificate several times- Verified that the certificate information is correct and matches what is listed in Jamf- Verified that the setting in my httpd.conf and http-ssl.conf files- Restarted Apache (multiple times)- Restarted the DP that is not working- Compared the settings of the DP that is working with the one that is not-re-entered the password for the jamfread account in Jamf and on the passwords file on the DP- Pasted the link for one of the files that

Apple Business Manager is now just Apple Business.Remember to log in and agree to the new terms and conditions so that devices can continue to be added.https://business.apple.com/ 

Hey Jamf Nation! With JNUC getting closer you may have noticed that Level Up training options were recently added to the registration page. If you’re not familiar or you’ve never attended Level Up before, I wanted to share a little bit more about these training sessions and what you can expect this year. Level Up at JNUC returns as one day, exclusive, in-person training opportunities that take place the day before the conference kicks off. They will be held at the same location as JNUC, the Kansas City Convention Center, on Tuesday, September 22nd.These learning experiences are supplementary to the Jamf Training Courses like the Jamf 200, 300, and 400 Courses, but you don’t need to already have taken any of those as there are no prerequisites to participating in Leve

Hey all,Im using the JAMF Pro in house dock settings to remove apps though have hit a dead end with three Apple System Apps: Facetime, Apple TV and Apple StoreIm just wondering what is the best method for removing these last 3 from the dock. I have tried getting assistance from the JAMF Helpdesk and  even with their assistance we were unsuccessful in finding the correct path to remove these with the in house option.If anyone could walk me through another method I would be very grateful.

Does jamf offer a better setting for how to find the Approximate location of the device (iPad) on the Jamf School system. Other MDMs show the location much better. Is there something that I am doing wrong? Please advise.I am using Jamf School.

I just got to 250+ “bytes”!  That XL Gamer Desk Tech Mat is so close…I am dangerously low on swag.  Seriously, I only have the jamf shirt I goyt when I got my CCT.-Pat 

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

PI-1152 involves the MDM Device Identity Certificate not being trusted on new enrollments after updating to version 11.26.PI-1153 concerns Device Identity Certificates being marked as untrusted in Keychain Access during enrollment in version 11.26.1.

I am seeing a Keychain not found alert after I recently started enforcing OneDrive Desktop and Documents sync. This just happened on my newly enrolled test Mac after I registered platform single sign-on. The alert appeared as I was logging in to OneDrive. There is actually an entry in Keychain. I looked up the ID shown in the screenshot. Reset to Defaults is NOT the right choice. I found that unlinking the Mac from OneDrive and then signing in again helps, but this prompt came up as I was in the process of logging in. We use platform single sign-on so there is no password prompt. Has anyone else seen this and solved it? 

There are hundreds if not thousands of Terraform examples and walk throughs on the internet today. Most of them start in a clean environment. They assume a brand new account. No history. No surprises.But that’s rarely the situation most of us inherit.More often, we’re working on something that’s been evolving for years:Resources created manually in a GUI Naming conventions that shifted over time Temporary fixes that became permanent Configurations that “just work,” but nobody is entirely sure whyApplying Infrastructure as Code (IaC) using Terraform in an existing, already-provisioned environment is often called Brownfield Terraform.You’re not building from scratch.You’re (very carefully) translating the current reality into code. What Does Success Actually Look Like?Before getting into mechanics, it helps to define the goal. In a brownfield migration, success

Hi Guys,We are facing very weird issue at our Orgs, where none of the packages are getting installed during enrollment for some devices. The issue is not for all the devices, and usually for few devices but been having this issue once in a while.All the packages are signed, and works perfectly fine for most of the device. And for god sake, we cant replicate this issue whenever we do a testing.Those devices who have issue with package installation, usually works once wiped and re-run the enrolment process.Does anyone have idea on how to get this sorted?

Not sure if I am the only one experiencing this or not. We are using code 42 and some users folder /Library/Application\\ Support/CrashPlan was deleted. The app cannot be removed because it is locked and the uninstall script cannot be run because the aforementioned folder has been deleted. We also cannot reinstall the backup agent as we get a "Install failed contact the software manufacturer" error message. Has anybody experienced this and found a fix? I tried using the uninstall script from another computer but it failed saying that the script is not originally from the computer. 

New and somewhat confused JAMF-user here, and thus: silly questions.I'm using Entra as my Cloud Identity provider and I'm trying to create a smart user group based on membership in an Entra-group (JAMF_KLA) in order to build configurations for said usergroups. But I cannot for the life of me get it to work (nor do I know if it's actually possible).Looked at the mapping of both the SUG and in the CIP-setup, and everything there looks like it should work. Can also do a test against various users, and it works (User that is in the Entra-group gets green checkmark, user that is not in group gets red checkmark). Which tells me that the lookup is working.I see that I can also add users from a Directory Service from the Settings-menu. However, is that only for admins/auditors? I see that there's an option for Enrollment Only. Does this mean that the imported users do *not* have access to the JAMF-console?

Fortinet's recent FortiOS 5.4.1 release for their FortiGate security appliances prevents any version of FortiClient prior to 5.4.1 from registering to the appliance. Users may even get a "FortiClient is being actively blocked from registration" which can cause panic and confusion. The problem is that, as of this writing, FortiClient 5.4.1 has yet to be released. Talk about putting the cart before the horse. So let's say that you don't want to have a few hundred upset users and would rather uninstall FortiClient discretely, en masse. Fortinet's documentation tells you to run the FortiClientUninstaller GUI app to uninstall FortiClient. But here's a more streamlined and scriptable method: /Applications/FortiClientUninstaller.app/Contents/Resources/uninstall_helperrm -rf /Library/Application Support/Fortinet/ Optionally, check for the existence of the following file and delete if it exists/private/var/root/Library/Prefer

Jamf is thrilled to announce the brand-new Jamf 140 Course; a free, self-paced course that builds foundational skills to manage, secure and deploy Apple devices in K-12 environments.Check out the blog post about the 140!

I am having hard time deleting smart user groups, I get the spinning wheel when I click on delete. The groups are empt. So annoying! 

A complete, step-by-step deployment guide - including macOS Onboarding and Jamf ConnectAuthor: Meir ElimelechWith contributions from: Omer Ninyo / ​@Ninyo Why this guide exists – and who should read it Jamf’s move to make Self Service+ mandatory for macOS has prompted many organizations to re-evaluate their deployment and enrollment workflows. While Jamf’s documentation covers the supported installation and migration paths, real-world environments often include a mix of enrollment models, identity integrations, and timing-sensitive workflows that are not always addressed in isolation.This guide exists to provide a single, practical reference for migrating to Self Service+ across all common macOS scenarios — from brand-new enrollments to existing fleets, with or without Jamf Connect.It is intended for Jamf administrators, part

Hey, So, after lots of tests and struggling with new ways to migrate DMG file to PKG I found that none of them really works and the agent never starts and works properly... I found this script (don't remember where) and this solved my issue! ``` !/bin/sh Downloading OSX Update Package to /tmp on the host curl -o /tmp/update.tgz http://YOUR_SERVER_NAME_OR_IP/SC_packages/update.tgz; sleep 3 Extracting update.tgz to /tmp tar -zxvf /tmp/update.tgz -C /tmp; sleep 3 Installing SecureConnector as a Daemon/Dissolvable w/ visible/invisible menu bar icon sudo -S /tmp/Update/Update.sh -t daemon -v 1; sleep 3 Checking/Starting processes in case they did not start on install daemon_pid=ps auxww | grep -v grep | egrep "ForeScout SecureConnector.-daemon" | awk '{print $2}'agent_pid=ps auxww | grep -

School admins want us to set a restriction for students to not be able to use their iPads past 10pm. I asked Jamf AI but we currently don’t use Jamf Parent, nor Jamf Teacher. It also gave the option of using Screen Time Downtime, but when creating that Config profile, I don’t have that option available to me. Has anyone had any experience in doing this?

Soooooo with the new “Apple Business”, check out the new API endpoints!!https://support.apple.com/guide/business/create-an-api-account-axm33189f66a/1/web/1I’m drooling at the user options for scoping purposes.  Been waiting forever for these to appear 😍  

Hello,Google is our IdP for logging in to Jamf Connect Login. I am using Self Service+ which states that the local password is “In Sync”. If I change a users password in Entra (which then will sync to Google Workspace), the “in Sync” does not go away or update ever. If I were to reset the password locally though Self Service+ using the menu bar drop down (opens Entra password change portal) it then states that the password is out of sync and that I need to login again to Self Service+. Great! I login, it accepts the new password, and states that the password is “in Sync”. I am never prompted for the old password.If I log out of the user and log back in with the new password, I am successful at the Google SSO pane, but it then has a smaller Jamf Connect pane that asks for valid credentials, which is the previously set password. The local password will not update despite “being in sync”.I have to be doing something fundamentally wrong, any help would be really app

Today we're opening the public beta of the Platform API Gateway – a single, unified way to access any combination of Jamf APIs, current and new. You manage all of it from the new Integrations space in Jamf Account.Jamf is no stranger to integrations. The Platform API Gateway takes that further – one place to manage access, one consistent way to authenticate, and a growing set of APIs that cover the full Jamf platform. Unify your workflows, reduce friction, and realize the full value of your Jamf journey.As Apple continues to grow in the enterprise, the way organizations build, automate, and integrate is evolving too. Workflows are becoming more extensible, more autonomous, and more agentic – and we want Jamf to be the foundation customers and partners build on to get there. The platform that manages and secures millions of Apple devices worldwide is opening up fully – rooted in what you know, built for what's next.This beta is the first step.What

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager