Hi, everyone!We are in the “Pilot” stage of our Self Service+ deployment.  For the most part everything has run smoothly while deploying as a policy to our “test” group and our “pilot” group.  I scoped the policy to our “pilot” group on 3/23/26 and did not receive any reports of any strange activity or concerns.  However, this morning, three different users reported seeing a Self Service+ pop-up when they logged into their machines for the start of the work day.  When my colleague and I were testing this policy on our test machines, we did not see this pop-up or anything else happen out of the ordinary.  I know that this is considered  “expected behavior” but, I would like to figure out why it has only happened for three spereate individuals and no one else (as of yet).Has anyone else experienced or heard of this pop-up occuring on there end?  TIA!-Michael G. 

• https://support.apple.com/en-us/100100• iOS - 30+ CVEs patched• macOS - 70+ CVEs patches

I'm trying to upload a signed config profile and I keep getting "Unable to create object from file." It worked a few months ago, but I had to change the name. I changed the UUIDs, there is no duplicate named profile and the unsigned profile uploads fine. I tried both a couple signing certs I have in Xcode as well as creating a signing cert using these instructions.I can install the profile fine locally:We're running 10.41.0-t1661887915 in the Jamf cloud.

We have configured Jamf with Nudge. The action button Update Device launches the Self Service policy for the minor update of the current OS. However, with Self Service+, this does not work. The Self Service+ app launches, but the policy never begins. It simply spins. With the old self service, it works without a problem. This is a bit of an issue because it then becomes more difficult to enforce compliance with Nudge. Anyone has a solution? Thank you.

Hello, We have had "device compliance" for MacOS configured since August 2024 and it appears to be working correctly. I just enabled the iPadOS/iOS option and the test device appears in the Device Compliance = Compliant smart group in Jamf but continues to show as "n/a" for compliance in EntraID. It's been half a day and the EntraID compliance status has not changed. How quickly should the compliance status get updated in EntraID and is there a way to sync Jamf with EntraID to update the status? Is anyone seeing this work successfully?Thank you. 

Hello All,We’ve just started to implement Jamf Pro in our company. Nearly all configurations are completed except sending compliant information to Microsoft Intune. We have to do this because we’re using Azure (Entra) Conditional Access rules in our company. If a macOS device is not compliant it cannot reach internal company resources. Just a simple rule. Steps CompletedJamf <> Intune compliance partner connector connected successfully. Microsoft Device Compliance configuration policy prepared in Jamf Policies -https://learn.microsoft.com/en-us/intune/intune-service/protect/jamf-managed-device-compliance-with-entra-idProblem SummaryAfter enrolling to jamf, we are trying to sign in to Company portal and jamf compliance popup appears. Then we

Hello For those running MacOS 26 how are you deploying background security improvements?Blueprints doesnt seem to understand the format. https://support.apple.com/en-gb/111333I could find anything in Jamf blueprint documentation either.  thanks

Hi Team,I’m evaluating a potential integration between Jamf Pro and a third-party Threat Intelligence Platform (TIP), and wanted to validate feasibility from a technical/partner perspective.The TIP APIs provide: Stream of malicious IOCs (IP, domain, file hash, URL) (Usually need to run on schedule) On-demand IOC reputation lookup (malicious/suspicious/benign) File and URL scanning capabilities Planned approach: Integration will rely only on Jamf Pro APIs (no agent/kernel-level extensions) Key questions: Can Jamf Pro workflows leverage external IOC data to trigger actions on managed devices? Using Jamf APIs, is it feasible to: Enforce blocking of malicious domains/URLs via configuration profiles or policies? Act on files (e.g., remediation based on file hash via scripts)? Trigger a

Hello Jamf Nation,Don't miss your chance to secure your 2026 JNUC tickets at the Early Bird rate of $1399 ($1199 for education and non-profit organizations). Starting April 1st, the Just in Time rate of $1,499 will apply ($1,299 for education and non-profit organizations).If you need help getting approval to attend, we've prepared a Convince Your Boss Letter to ensure you don't miss out.Have questions or need additional assistance? Visit our JNUC FAQ or email us at jnuchelp@jamf.com.Ready to secure your spot? Register for JNUC 2026!

I am using Jamf Pro with Google IdP, Enrollment Customization, PreStage Enrollment, and Single Sign-On. However, no matter what I try, when I enroll a device the fields populate as:Full name: Firstname LastnameUsername: firstname.lastname@emailaddressWhat I want instead is for the username to be first.last.I created a custom SAML attribute that maps to firstname.lastname, but I have not been able to get it to work. I’m not sure what else to try.Is it possible to have the home directory set to first.last instead of using the full email address?When I use $FULLNAME and $REALNAME in Enrollment Customization and PreStage Enrollment, the auto-populated information during device enrollment becomes:Full Name: Firstname LastnameAccount name (home directory): Firstname Lastname Not using Jamf Connect

Hey Jamf Nation! With JNUC getting closer you may have noticed that Level Up training options were recently added to the registration page. If you’re not familiar or you’ve never attended Level Up before, I wanted to share a little bit more about these training sessions and what you can expect this year. Level Up at JNUC returns as one day, exclusive, in-person training opportunities that take place the day before the conference kicks off. They will be held at the same location as JNUC, the Kansas City Convention Center, on Tuesday, September 22nd.These learning experiences are supplementary to the Jamf Training Courses like the Jamf 200, 300, and 400 Courses, but you don’t need to already have taken any of those as there are no prerequisites to participating in Leve

So I have a strange notifications that only pop up If you start the SS.app This is standard but when you start the SS.app then the error appear in Notifications. Clear dont work also the old sudo rm -R ~/Library/Application\ Support/com.jamfsoftware.selfservice.mac/Dont work. When you close the App the number 1 in the dock also disappear.  If I login with another user there is no error so seems account related, Anyone idea how to fix this?thanks

Hello all you Apple Rockstars!I just noticed that there’s a whole reward system you can redeem points (“bytes”) for stuff.  Very cool.  Ivanti used to have something like this called Insiders, but the reward system was abruptly discontinued while I had lots of unspent points.I’m not sure I fully understand what actions get points, but it looks like you get 5 points for the first posting/replying each day, and then a single point for each subsequent post/reply.Doing some quick math:  If you want to get to 500 points, that would take you 100 days.  Assuming  you only did 1 post/reply a day, on normal workdays, thats 20 weeks.Does that seem like an unreasonable amount of effort to get a tech mat or whatever?I know they are doing this to stimulate customer engagement, but I think they would need to get more generous with the points for people to participate more.What do you think?Anyone had experience with redeeming points?  I’m not sure

Today we are releasing a maintenance version of Jamf Connect which includes minor bug fixes and improvements. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Connect 3.4.0Self Service+ 2.12.0OS 26.1 Tahoe (Many other machines on 26.0.1)I can not get this prompt to close no matter what I do. Everything in the back end seems fine with my machine and my connection to Jamf, self service, connect, everything, it all seems fine. Anyone have any ideas?  I did not see this issue prior to updating OS from 26.0.1 to 26.1 and that is the only thing I can think of that may be triggering it. I have tried deleting associated keys and allowing them to regen, I have tried flushing and re-pulling Config Profiles and Policies. P&S settings are all good. I have fond that if I leave the window there for 30min or more, it will finally close after entering PW and selecting Always Allow, but then comes back up after Reboot.

For some reason there is an Item Failed notification in the Self Service+ App (with+ I mean the new version.So the old fix “sudo rm -R ~/Library/Application\ Support/com.jamfsoftware.selfservice.mac/”dont work any more. Its account related because if I login with a different account this issue is gone:Also its only there when you start SS.app (the 1 in the Dock appear if you close SS the ! disappear)Any idea?  thanks   

We have an iPad that switched on after 2 months now it has an expired certificate I cannot renew. (See the attached images)This iPad is connected to the wifi but it doesn't communicate with the JAMF server all the commands are in pending status.When I check the "  JSS Built-in Certificate Authority " in the server it's expires in 2033Can anyone help regarding this issue what should I do?      When I open the iPad from the JAMF server This is what I can see on the device When I got to the PKI certificate and checked the certificate expired in 2033

Hello all,  Today and last week Friday, we’ve been seen users get the Jamf Connect Keychain pop up. Computer will show JC 3.5 is installed and it’s getting the latest Self Service + and the popup reoccurs on restart.  I’ve opened a ticket but wanted to reach out here and see if something clear and apparent is happening.

Hi everyone,We have a WPA2/WPA3-Enterprise network, and I am wondering if it is possible to use Jamf’s built-in CA to push certificates to end devices, so that users can be authenticated for Wi-Fi using those certificates.Additionally, what is the typical approach for this setup? I see docs recommend using AD CS, but our organization uses Azure rather than on-premises Active Directory.I would appreciate any guidance from someone with experience in this area. Thank you.

Hello Jamf Nation! Last month, we were excited to share the Get Started with Scripting series in the Jamf Online Training Catalog enjoyed a full refresh, covering topics from Terminal fundamentals to the Jamf API. Now, we’d love to hear what you think!Whether you’re just getting started or have already earned your Command Line Innovator badge, we’ve put together a quick, three-question survey for you to let us know how we can continue to serve you in your learning journey. Have questions

I was creating a configuration profile to setup a webclip that redirects to a URL. I accidentally put a name for the bundle ID: com.apple.webapp with an XYZ name and now Jamf has made that association and has changed or plugged in that XYZ name into all my other profiles that have that bundle ID. This created a bunch of orphan icons on a test device I was working on. How do I remove remove that? I am working to remove that bundle ID in all my Restrictions profiles, and will have to reset my devices. SOS! I am new to jamf, so def learning as I go. 

Hi, I am running a  vendor bash script from self service as part of a remediation effort. As part of the script there is a device shutdown. This happens before the device feeds back policy logs so if it fails I cant see why. Would anyone know if sh scripts and their results get logged automatically somewhere or if there is a simple command to get them to do so? Alternatively presumably I could remove the reboot from the script and have the JAMF policy do that?

How to do we stop these notifications from popping up? Staff are receiving these throughout the day and it’s very annoying and disruptive. MB Air M2 and OS is 15.5.0 or later. Is there a config profile or settings to adjust in Jamf?

I inherited a pretty banged up Jamf environment and im looking for a way to re-escrow 103 users’ personal recovery keys. I know how I can do this on the Mac itself, but im wondering if theres a safe way for me to do this in bulk. Thanks!

💙 Hi, Jamf Nation! 💙We’re gearing up for this year’s Jamf Nation Live (JNL) events, and we’d love to feature a few customer voices at each stop on the roadshow. If you’re planning to attend one of the JNL cities and would be open to speaking, we’d love to hear from you!✨ What we’re looking for:• A short customer story (5–7 minutes)• Focused on your Jamf journey, wins, or lessons learned• Comfort speaking to a friendly, community‑driven audience🗣️ How to participate:Drop a reply in this thread with:1️⃣ Which JNL city you plan to attend2️⃣ Whether you’re interested in speakingWe’ll review all responses and follow up directly.Thanks for helping us make JNL 2026 even more meaningful! 🙌🏻