Hello all,I inherited a Jamf server running on CentOS, which I want to migrate to Ubuntu to fulfil system requirements.However, while restoring the database on the new server it throws an error: CREATE TABLE `os_update_process_manager_command_c ... Error: Error 6125: Failed to add the foreign key constraint. Missing unique key for constraint 'fk_process_manager_uuid' in the referenced table 'os_update_process_manager' I don't know how to handle that issue.Any ideas?

Hi all,I’m just about 100% sure this isn’t a Jamf issue, but wanted to see if anyone else had any thoughts. We are attempting to get Nexthink installed on our Macs through Jamf. I created a folder in /private/tmp/Nexthink and put the csi.app and the customer key.txt file there and created a pkg through Composer and uploaded it to Jamf. I created a very simple install script to deploy with the pkg file: #!/bin/bash/private/tmp/Nexthink/csi.app/Contents/MacOS/csi \ -address like.to.our.portalurl \ -tcp_port 443 \ -key "/private/tmp/Nexthink/Customer Key.txt" \ -use_assignment=true \ -ra_execution_policy=signed_trusted_or_nexthink \Nexthink installs and Jamf reports back that it completed with all the correct settings including the Engine IP address and Customer key. However, when looking at the local config.json file the customer key has added in a “\” character anytime there is a “/” character in the customer key (so it now shows \/), and causes it to not report in, if I view the l

I have a need to disable apps from auto updating temporarily.Despite the settings are in place, I see applications continue to auto update.Is this a bug in Jamf Pro?   

Hello every one,We’re about to renew our AD CS certificates for the first time. We deploy them with different names depending on device type, account type, work place etc. We got the following witch we deplay with configuration profiles. This certificates make the devices to connect to the right SSID automatically.BE-ADCS-Cert → Students, computers BK-ADCS-Cert → Main organisation, computers BH-ADCS-Cert → Second organization, employees mobile devices and computers MOBILE-ADCS-Cert → Main organisation, mobile devices TABLET-ADCS-Cert → Main organisation, shared mobile devices TV-ADCS-Cert → Main organisation, Apple TVsAnybody familiar with doing it and what could be the best way to update to update? Is it possible to run the old (as long as its valid) and the new side by side for a while?

We manage our ipads using Jamf Pro. We load the students google email accounts onto the device using a Jamf configuration profile with the Google payload.  The mail account will appear on the device (ipad iOS mail app) and prompt user to enter google password.  The user enters the password and the iOS mail app will display the students google email.  However,  several times through out each day, the iOS mail app will stop displaying google email and prompt user to re-enter their google password.   After re-entering the google credentials, the Mail app will not always start working again.    I have had Jamf support review our config file with the google payload - they said it is set up correctly.  I have contacted Google and they said that it is a Jamf issue.  Has anyone else experienced this issue?  How did you resolve it? thanks.

Today we released Jamf Connect 3.3.0. This release includes the following: Changes and Improvements The release_notes.txt file is no longer available in the Jamf Connect DMG file or Jamf Connect Configuration. To view the Jamf Connect release notes, see Jamf Connect App for macOS Release History.Resolved Issue [PI139049] Fixed: The identity provider authentication prompt in the Jamf Connect login window requires users to scroll if the Login Window Size (LoginWindowSize) setting is configured. For configuration profiles using Okta-OIDC as their identity provider, Jamf recommends configuring the Login Window Size (LoginWindowSize) setting to Max for the best user experience. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Hello,Looking for advice or a possible solution via JAMF for the following scenario:Have a bunch of iPAD’s in the field with multiple eSIMS and we are looking to have data occasionally flow over the secondary eSIM and switch back to the primary, possibly making this occur a few times per day/week, this would need to be automated.Possible or not without user intervention?

I am trying to make a smart group to see what computers have the PaperCut Client installed but i don’t see anything in the /Applications/PaperCut Print Deploy Client/ directory that i can select as the .app in the smart group. What can I use create this smart group?   

Hey All,Is it possible to change the timeout on a Jamf Cloud console session?We're on Jamf Cloud 10.42 using SSO to login to the console, if that matters.The main issue (among others), is that when performing a GSX lookup, the web session usually times out before the look up finishes.We have ~1400 workstations which takes at least 10-15 minutes to update, but more often than not results in a session timeout.  I've tried creating a SMART group where there is no Warranty info for the device, but the only options are Warranty Expiration is before/after or within a certain # of days.It does seem as though if I open a new JSS tab in the same browser window and work in there while the GSX lookup is ongoing in the other tab, that the GSX lookup session will not timeout.I did check the SSO settings, but it only has a Token expiration time, which is not what I'm looking for. Thanks for any thoughts.Phil

Sometimes you ask your self if you’re thinking right or not. But in this case I’m rather sure my thinking is correct but Jamf doesn’t understand or doesn’t work correctly. :)I’m make a smart user group that lists all computers with architecture type arm64 and with some exclusions. Se bellow. Without the exclusions it gives me 929, with the exclusion it should give me 918 but gives me the same as without exclusions.Am I thinking wrong or is something wrong with Jamf???  

I have logged on to Jamf Pro but the page is loading forever. Tried different browser but no luck.  

Hey Jamf NationWe’re excited to announce the release of Jamf Pro 11.21.0 beta. This release includes DigiCert One Certificate Payload Support for SAN values, Impact Alert Notifications for Deployable Objects, Support for new SkipKeys and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

How are people deploying Sopho's endpoint per macOS profiles? Are you creating smart groups for each OS and then assigning them to Sopho's endpoint profile for that OS? What happens when a user upgrades to another OS, do they get popups when old profile removes but does not have the new profile yet?

Hi, We are using Jamf to deploy Parallels to certain users.I guess that starting from Catalina it stopped working, it just fails. Installation failed. The installer reported: installer: Package name is Parallels Autodeploy Packageinstaller: Installing at base path /installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “ParallelsDesktop-15.1.1.pkg”.) When performing a manual install it asks for Downloads, Desktop and Documents access.Using the PPPC tool i've uploaded that config, but when opening it. The Documents access is not shown and cannot add it either.Could this be the issue? Anyone else having this issue?

Hello my boss wants me to help setup auto drive enrollment for our devices in my org i never done anything like this before but i’ve been doing some researchand i am confused on the whole jamf connect, we have a prestage enrollment created when computers are added to the group that will put them through the auto deployment which has been giving us issues for a while nowmy boss wants me to upload a jamf connect pkg file to the enrollment packages section on our prestage enrollment but i dont know how to do thatany help and advice on auto device enrollment within jamf would really help.

Are you doing work that excites you? Are you still learning and growing?These aren't easy questions to ask, but they're critical for a fulfilling career. The truth is, sometimes the most courageous thing you can do for your professional life is to recognize when a role or company no longer serves you.Don't be afraid to listen to that quiet voice telling you it's time for a change. It's not a sign of failure, but a sign that you've grown and are ready for the next challenge.Your career is a journey, not a prison. Have the courage to build the one you truly want.What was a sign that told you it was time to move on?Please share your experience in the comments. I am curious. 🤔

We’ve run into an incompatibility between Clever IDM that rosters/creates our Google student accounts from SIS data and Jamf cloud IDP. I am trying to fill data from Google attributes (Job Title “title”) into the “position” field within Jamf. My mappings are correct. Clever IDM writes these attributes into Google with a customType of “CleverIDM”, but Jamf only looks for entries with no customType.Example: "organizations": [ { "customType": "CleverIDM", "department": "Mathews High School", "title": "IMM1" }, { "customType": "", "title": "IMM1" } ]Any one have any options or have you ran into this before?Can Jamf use department/title where customType = "CleverIDM"?If not, could Jamf match on another attribute, such as employeeID using customType?

Anyone in here HA users?  How many of you all are using all local calls without any need for internet?What kind of cool stuffs are you doing?  I know this isn't JAMF related (per se - although you can do some pretty cool things with API and home assistant….maybe integrate things with JAMF instead of leveraging Routines?).Anyways, just curious of how many folks in here are home nerds as much as corporate nerds 😄

We continue in our efforts to streamline compliance benchmarks workflows and unify the reporting. Today, we are proud to announce two new highly demanded exports within the Compliance capability in Jamf Pro - something you have been asking for since the initial launch of Compliance in April.Auditing documentation: Holding the benchmark settings as configured by the admin, this set of documents is aimed to serve for compliance audits purposes. Those of you already using Jamf Compliance Editor or mSCP are familiar with these - now the adoc, pdf, html, and xlsx documents for each supported OS version are available right under Compliance Configuration tab in Jamf Pro. Compliance status: After enabling the computer-level compliance reporting in July, you can now export the overall compliance status, i.e. number of passing and failing computers for each rule in a benchmark, into csv file - very similar to the one produced by Compliance baselines in Jamf Protect. With this export, you can rep

Hello everyone, i did a test run for the jamf Class Assigner yesterday. After going through the steps in the documentation i got the app running in teacher and student mode.   But even though the teacher ipad is assigned to a teacher user (including managed Apple ID loged in on the Teacher device) i get "Teacher not assigned to device" displayed in Class Assigner.   i built a manual class in jamf school with a user assigned as teacher and tried importing a class from ASM with teacher and student rolls defined, same error.   Any help would be appreciated.

From @talkingmoose Many thanks again! • Regex looks for all Mac models compatible with macOS 26 Tahoe. May not be up-to-date with newly released models. https://gist.github.com/talkingmoose/3340d122ffd6b4fccb5f1319b7067f73• Regex looks for all iPhone, iPad, and Apple Watch models compatible with iOS 26, iPadOS 26, and watchOS 26. May not be up-to-date with newly released models.https://gist.github.com/talkingmoose/8626115822ca9f81463dd4e9e902ff9a

This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:   Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools

I’m wondering how others approach Macs that have become unaccounted for, lost or stolen?We have a fleet of approx 1500 - many that were purchased before any of the stuff currently involved in managing them were working for our organisation.Sometimes I’ll come across a Mac that is still checking into Jamf, but we have no record of who it belongs to and whether it was legitimatly bought-out or not.Othertimes we have Macs that have just been plain stolen.There’s another scenario on top of this where I’ll encounter Macs that check-in, so can seemingly run Policies but aren’t doing an inventory update, and won’t run Management commands. (the Wipe Computer command being one I’d find quite useful in particular)With that in mind, I put together a script to install a launch daemon that launches a script that agressively notifies the user that the device belongs to our org, and to contact our helpdesk - it blocks the screen out to the point the device becomes unusable. I am yet to deploy it thou

Hey All,We’ve been using a fleet of WiFi Only Apple TV’s as digital signage in single apple mode, we changed the configuration profile, and this appears to have disconnected all of them, while keeping them stuck in single app mode. Is there a way out of this? Kind Regards,Jarrah