Hi so i have APN certificates expiring with a former employee who setup our devices and I created a jamf distribution email /apple id for in the future we can renew easier and if I leave someone else will be able to renew.What happens to the devices when the apn certificates expire?Will I no longer be able to see devices until I re enroll them?Thanks

Hello and thank you for taking a moment to look at this. I will try and keep it short and sweet! I am running Jamf 10.4 and am having issues getting Patch Management to display any software titles. When I go into Patch Management > New I get the following error...(A connection error occurred while attempting to download software titles from this source.) Everything else is working as far s I can tell. However, I have not used this feature before, only glanced once or twice in the past and the software at one point did populate. Am I missing something easy here or has anyone seen this before at all? I appreciate any and all suggestions, thank you!

Since I don't see the info currently available in Jamf Pro as built-in Smart Group or Advanced Computer Search criteria I created the following EAs to report the macOS version and deadline date of any pending Declarative Device Management Scheduled Update command. I expect/hope Jamf will add them as eventually, but in the meantime...  EA script that returns a String Data Type with the version number for any pending DDM scheduled macOS update: #!/bin/sh DDMSoftwareUpdateInfo="/private/var/db/softwareupdate/SoftwareUpdateDDMStatePersistence.plist" result="No Update Pending" if [ -e "$DDMSoftwareUpdateInfo" ]; then pendingUpdate=$(/usr/bin/defaults read "$DDMSoftwareUpdateInfo" | /usr/bin/grep TargetOSVersion | /usr/bin/cut -d \\" -f 2) if [ -n "$pendingUpdate" ]; then result="$pendingUpdate" fi fi echo "<result>$result</result>"   EA script that returns a Date Data Type with the deadline of any pending DDM scheduled macOS update (since returning a non-date f

Edit: Replaced beginning with updated Mac Studio and M2 Mac details now that i've finally gotten some in my environment to confirm.Hi all, I've gone ahead and taken the liberty to modify the existing Regex from @talkingmoose to account for the devices that are currently being listed as compatible with macOS Ventura, along with a little bit of future proofing:(^Mac1[3-9]|MacBook\\d{2}|MacBookAir([8-9]|\\d{2})|Macmini([8-9]|\\d{2})|MacPro([7-9]|1\\d)|iMacPro[1-9]|iMac(1[8-9]|2[0-9]),\\d|MacBookPro(1[4-9]|2[0-9]),\\d)This can be used in a smart group or inventory report using the criteria item Model Identifier and then selecting "does not match regex" operator. Copy/paste the regex into the value and save the Smart Group to view all mac's that ARE NOT compatible with Ventura, or set the operator to "matches regex" to see devices that ARE compatible.Let me know if I made any mistakes. Thanks all! 

Hi All Community Members,We are trying to setup JAMF Teacher for use with our Teaching Staff using am issued ipad, and students using shared ipad.We have created a Teacher Group and a Student Group for use by the Students and configured them as required by the Configuration Guide.  The students seem to be able to log on to the Jamf School Student fine if they are sign in to the shared ipad with their apple id, but the Teachers Cannot log on to the Jamf Teacher app.  nor can they log on to the site specified via the Jamf Teacher Online URL.  when i try a password reset for the Teacher Accounts we simply get the error "InvalidAuthMethod"?Any help here would be appreciated.

When using #!/bin/bash in an Extension attribute script in Jamf Pro (10.46)  Jamf will error when trying to save. Not sure this has been fixed in a later version. #!/bin/zsh works fine though.

Hi All,I am trying to package SPSS 29 on Apple Silicon M1, using Composer to package. I tried to install it through script and activate through script and as soon as I launch the application after installation and activation it just crashes. also, I did through snapshot that crashes too.Basically, even the manual installation and activation didn't make any difference.Any help much appreciated.Thanks.

I am able to add the Apple clock app to self service, but because I cannot assign a license to it, it won’t download on the managed iPads.I tried “buying” licenses from Apple School Manager, but I can’t get licenses for a system app.

Hi all,   I need an iOS emulator i can enroll it with Jamf for testing. Any idea ?   thanks

This just recently started.  Wipe a test machine and go thru the setup.  The jamf framework loads but not self service nor do policies run. config profiles load including MDM.The Macbook is in ABM assigned to our Jamfcloud server. DEP runs and JamfConnect in the Prestage makes the end user account based on Entra ID.Here is the log file.  Not sure what has changed to make this occur.mac.test@MacBook-Air ~ % cat /var/log/jamf.log Mon Dec 11 12:39:58 MacBook Air jamf[733]: The SSL Certificate for https://domain.jamfcloud.com must be trusted for the jamf binary to connect to it. Mon Dec 11 12:39:58 MacBook Air jamf[733]: Enrolling computer... Mon Dec 11 12:39:59 MacBook Air jamf[733]: Skipping trustJSS command... Mon Dec 11 12:40:00 MacBook Air jamf[733]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword Mon Dec 11 12:40:01 MacBook Air jamf[733]: JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword Mon Dec 11 14:4

For our Lab and Classroom deployments, we create several accounts via policy as part of our deployment, including one that is an auto-login account. The problem that we just discovered is that while we do create a local administrator account, since the auto-login account is the first to actually log into the computer, it is the account receiving the secure token.Does anyone know of a way - other than disabling auto-login and manually logging in to every computer first - to make sure that our local admin account has the secure token, rather than the generic user we are creating?

Hi all,i wanted to remove MDM Profiles from a client and used sudo jamf removeFramework instead removeMDMProfile. So now i have a problem..i can´t enroll this device because the profiles are still there and cannot be deleted.How can install jamf on a mac manually und do sudoremoveMDMProfileThe easiest solution would be to remove the old profiles on a mac but they are not removable. I cannot remove them as admin.Any ideas?greetz Frank 

 I get this annoying generic ask for Admin log/pass.I have the PID and process name/number, but again it is generic. It just lists [Security Agent] I'm not sure where to look after this. I don't see anything in the logs either....or maybe I am looking at the wrong logs. any help would be appreciated. 

Hello All, In my organization, user connect to company's SSID using by certificate based authnetication and with EAP-TLS mode and WPA2 Enterprise security protocol, but few users are not able to connect, it is showing connected and then moving another SSID which was connected before. I am getting the below error in wifi log, any idea to fix it? Usb Host Notification Apple80211Set: seqNum 698 Total 0 chg 0 en0Thu Dec 28 00:35:48.002 Usb Host Notification Apple80211Set: seqNum 699 Total 0 chg 0 en0Thu Dec 28 00:52:26.525 Usb Host Notification Error Apple80211Set: Device power is off seqNum 700 Total 0 chg 0 en0Thu Dec 28 00:52:26.856 Usb Host Notification Apple80211Set: seqNum 701 Total 0 chg 0 en0Thu Dec 28 00:52:26.887 Usb Host Notification Apple80211Set: seqNum 702 Total 0 chg 0 en0Thu Dec 28 01:09:02.634 Usb Host Notification Apple80211Set: seqNum 703 Total 0 chg 0 en0Thu Dec 28 01:09:02.933 Usb Host Notification Apple80211Set: seqNum 704 Total 0 chg 0 en0Thu Dec 28 01:09:0

FYI: This is for newly imaged/enrolled machines only. I'm not attempting this with machines currently deployed.  Is it possible to force Filevault to enable with 0 interaction from the end-user? Currently we have it auto-enable during enrollment but there is a small window that pops up that says "Turn on" or "Cancel" and they are unable to login for the first time without selecting "Turn on", but I'm hoping to skip that altogether. Since they have no option to move forward without enabling it, ideally we can force it in the background. We have: Jamf Pro, Jamf Connect, "Automatically install PPPC" with Jamf management framework and Jamf Connect. We currently have 2 Config Profiles that enable FV (though I'm honestly not sure which does what or if they're redundant):Application and Custom Settings > Jamf Applications > com.jamf.connect.login > Enable Filevault: TrueSecurity & Privacy > Filevault > Enabled Filevault > Enabled (At Login)

Hi, happy new year to everyone!!I have a complicated problem, when I create any policy (packages, scripts etc.) with any trigger method (ongoing, once per a computer etc.), devices are not getting policy before 1 day or more. When I try to get the policy with sudo command like "sudo jamf policy -id XXX", it says "No policies were found for the ID XXX". I can see the policy on Self Service but when I try to install (trigger method selected as ongoing), it says "This item is no longer available".I tried to change apache certificates, giving more RAMs to apache but nothing works.I found that when I restart DMZ server's apache service, it is working fine. What should I do? any suggestions? 

I am trying to install a different self-signed cert for each device. Is it possible to do it in JamF Now? I was able to install the same cert for all the devices through a custom profile configuration, but I want to install a unique cert for each device. Is this scenario only supported in JamF Pro?

Hello, a little newer to Jamf, our users aren't able to share to messages via safari. it's not even showing the option in there and I was wondering if there could be something configured in JAMF that would stop that from happening and where  could find that setting. We show airdrop, email this friend and share to notes, but not share to messages. Any help would be great, thank you! 

Is this possibe? Can force install the 2021 license but some users use an O365 license so want to make an smart group that only users with an 2019 license update to 2021 thanks 

We've got a small amount of Macs and use JAMF Pro to manage them.It seems that our Macs users have an issue where their prints are only printing in Color. Doesn't matter where they print from (which application), which device (happens on at least 3 different Macs), or to which printer.The printer in the main Mac office is the same make/model as elsewhere in the building. I'm told the issue may have started prior to this make/model anyhow, so it's not likely related to the printer itself.The same printers don't have any such issue when printing from our Windows PCs or Chromebooks.I'm not overly familiar with Mac management (due to the tiny portion of our environment they consist of) so I've had help with getting JamfPro setup to do things like deploy this printer to them.We've confirmed there's no apparent setting on the Mac that is helping - you can switch the print to "B&W" and it'll still come out in color. It shows B&W in the print preview.So..I'm at a loss as to where such

Our feet are currently on Ventura, with a few exceptions on Sonoma. We plan to migrate our devices to Sonoma in the near future. Due to Jamf Connect and Sonoma issues, we deployed 2.29.0 to our devices before our migration. I like to state our previous Jamf Connect Policy has the following Files and Processes Payload to ensure our devices default to the local login, "authchanger -reset -preAuth JamfConnectLogin:DeMobilize,privileged". When I created the new Policy with 2.29.0, I included this same payload. On our Sonoma devices, there really wasn't an issue during testing. I have shut down and restarted the devices a few times, and the default, Local Login, was the default. When Sonoma 14.1.2 was released and the devices updated and restarted, the Local Login was the default. But a restart after that first restart, those Sonoma devices are now doing the idP login, which we don't want. Has anyone else had this experience?

Our company recently installed Jamf on our Mac. Me and some colleagues on Sonoma are locked out of our accounts because a new password is required but the password is not accepted. In short:No Jamf installed. All is well.Upgrade to Sonoma. All is well. Install Jamf. Accept the certificate, check it out in System Preferences. All seems well.When the screen saver lock kicks in, try to log back in.A new password is requested. Enter it, in both fields. Password is rejected because "Your password does not meet the requirements of the server."Some notes:The built-in macOS password check shows all rules in green.I did try every password config that would make sense, no luck, and I don't think that's itI'm very puzzled about the need for "the server" to see my local admin password, WTF?! 

We are just rolling out new computers to our staff, the currently have MBPs with local accounts, on the new computers, we are adding them to the AD domain to ease with logins and password across our district. If we let them use Migration Assistant, they will create new users on the computer with their settings and files and not use the new account that we are trying to get them to use. We will assist them in moving their files, bookmarks,images and music over, but don't want them to use Migration Assistant. I have tried to rename / remove the app, I tried to restrict the app, nothing works. Any ideas?

Hey all! I have an issue that some of you can, hopefully, help with. Apple has made some changes to the way macOS handles screensavers and wallpapers over the last couple of iterations and, with Sonoma, I'm hitting a blocker when trying to deploy a policy to add an image and set the wallpaper to that image for all displays. This is how I currently have the policy setup: I created a package that adds a folder containing the image to to the system library I added the following script to run after the package was installed: #!/bin/zsh new_wallpaper_path="/Library/CompanyFolder/Company\\ Wallpaper/Company_Wallpaper.png" /usr/libexec/PlistBuddy -c "set AllSpacesAndDisplays:Desktop:Content:Choices:0:Files:0:relative file:///$new_wallpaper_path" ~/Library/Application\\ Support/com.apple.wallpaper/Store/Index.plist && killall WallpaperAgentI've executed the policy on my test machine successfully but when I had another user test for me, the package installed but the scrip

Hi, we have a MacOS we enrolled via configurator app and now have it in Jamf. It clearly is getting the profile as settings are restricted, user is set up as standard, profiles are there etc. But most management commands are missing. Also can not run any jamf commands, as there is no jamf in usr/local/ at all. I run sudo jamf version and get jamf command not found This is what management commands looks like for this mac very limitedwhile others have more:already tried wiping it and reinstalling MacOS as well. No dice