Today we released Jamf Connect 3.7.0; this release addresses the following product issues: [PI-923] Fixed: Authenticating via web view with Entra ID using a FIDO2 passkey prevents users from authenticating with Jamf Connect via the login window. [PI140159] Fixed: After two incorrect login attempts, the Jamf Connect login window fails to accept the correct password and prevents the user from authenticating after the lockout timer is complete. [PI152763] Fixed: The Sign In window displays two arrows that do nothing when clicked. Fixed: The installer for Jamf Connect does not force quit the Jamf Connect login window while deployment tools, such as Jamf Simplified Device Enrollment, are in use. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Anyone having a keychain issue and the onboarding window not opening automatically upon first login (newly imaged machine that hasn’t been logged into before)?  Tried 3 times and get the same result.Self Service+ Version: 2.4.0Jamf Connect Version: 3.4.1Jamf Connect Preference Domain Version: 3.2.0macOS Version: 15.5 (24F74)  

Reading documentation about 3rd party SSL certs and Jamf Pro. We are in the process of automating our Jamf Pro SSL cert renewal and I keep seeing that you need upload the 3rd party cert using the Jamf Pro interface. Is this that case? We already have a script for renewal that stops tomcat, edits the server.xml file with the correct cert info and re-starts tomcat. Do you also need to upload the cert into the Jamf console? is the cert also stored in the Jamf Pro DB?“Note:If your environment is clustered, you must log in to the Jamf Pro web app for each Apache Tomcat node and create or upload any SSL certificates for each node””This also comes up with migrating Jamf Pro to another server documentation (which we are also working on) 

Dear community,I am facing a major issue with our Jamf Pro environment.We are running Jamf Pro 11.21 On-Prem and have several working PreStage enrollments—until today.I had a device that was already upgraded to macOS Tahoe. After erasing the Mac, I started the PreStage enrollment. The macOS installation completed normally, and the device enrolled in MDM.However, after the Setup Assistant finished, Self Service never appeared, and only half of the expected configuration profiles were installed.I waited over 30 minutes, thinking it might be a timing or network delay, but nothing happened. I also tried: restarting the Mac running sudo profiles renew -type enrollment manually installing Self Service.pkg and jamf.pkg copied from a working machine Even after manual installation, the agent could not connect to the server.It looks like the Jamf framework does not install correctly on macOS Tahoe during enrollment.Has anyone seen this behavior, and what could be causing it?Thank you in adva

If anyone runs into this when trying to install the Nessus Agent with Jamf Pro: Installation failed. The installer reported: installer: Package name is Tenable Nessus Agent installer: Certificate used to sign package is not trusted. Use --allow Untrusted to overwrite. I have a fix. Thanks to Bartłomiej Sojka for pointing out that it's a hard link, and suggesting the solution. It’s the package downloaded directly from the vendor https://www.tenable.com/downloads/nessus-agents, in the section Nessus Agents - 7.4.3, NessusAgent-7.4.3.dmg I think the visible package in the disk image is actually a hard link to a hidden package in the disk image, named .NessusAgent.pkg. I have no idea why. Here is me using “ls -la” to get a long listing of all the files, even hidden files, in the disk image: MacBookPro:Nessus Agent Install ladmin$ ls -la total 28120 drwxr-xr-x 5 ladmin staff 238 Sep 10 16:11 . drwxr-xr-x+ 4 root wheel 128 Oct 31 19:55 .. -rw-r--r-- 1 ladmin staff

Greetings All!, Just getting started on my road to JAMF admin and am slowly building up my library of First Aid apps inside of Self service.  Trying to eliminate tickets coming my way and empowering the Help Desk to do some of this stuff.  I created this script to view the Personal FV Keys from the server without have to give anyone rights into the server.  This script is not perfect in any way, but I thought I would share it with the group nonetheless.  This using SwiftDialog for the GUI and was taken from a lot of GitHub scripts and customized it for my needs.  Enjoy!     #!/bin/zsh # This script retrieves the Personal FileVault Key for a particular computer # # Written by: Scott Kendall 12-20-2024 # Last Modified on: 12-20-2024 jamfpro_user=${4} jamfpro_password=${5} declare api_token declare api_authentication_check declare ID declare reason declare serial_num ###################################################################################

I’d wanted to understand for a while how Apple structures its own support approach and what really lies behind the Apple Certified Support Professional certification. So I decided to take the exam myself. In this post, I’ll share how I prepared, which learning resources helped me most, and what I’d recommend to anyone planning to do the same. The Apple Certified Support Professional (ACSP) certification validates comprehensive knowledge in supporting and administering Apple devices. It’s designed for IT professionals, help desk staff, and administrators who regularly work with macOS, iOS, or iPadOS and provide daily end-user support. “This course introduces you to the knowledge, skills, and tools used to support and troubleshoot Apple devices in a large organization as a level 1 or 2 help desk professional.”  Learning Resources and Preparation   Apple offers free official learning modules on the Apple Training platform. These cover all topics included in the exam, such as user manageme

How can I disable the Help Apple Improve Search Item in the Spotlight Section of the System Settings?I can't find anything in Configuration Profiles and didn't find something related in com.apple.Spotlight.plist in /Library/Preferences/ or ~/Library/Preferences/.

Update 23 February 2026: Standard Cloud upgrades have been rescheduled for the weekend of 6–7 March 2026 (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.25; highlights include:Branding Self Service+ for macOS via Jamf ProYou can change the Self Service+ application name and icon using Jamf Pro and Self Service+ 2.15.0 or later if Self Service+ is set as the default end user application. Previously, modifying Self Service branding settings in Jamf Pro only altered these attributes in the Self Service classic application.Improvements for OIDC-Based Single Sign-On Through Jamf AccountThe Jamf Pro login page retains the last-used identity provider (IdP), eliminating the need to reenter an email address. This requires users to allow cookies from jamfcloud.com. Ending a session in any Jamf web app integrated with OIDC-based SSO through Jamf Account will end the same session in Jamf Pro. Likewise, ending a session in Jamf Pro will end

Hello everyone,I'm just sharing my fix for a problem I got since I switched to Self Service+ (SSP). I'm not sure if others have encountered this but it affects all our Macs (40+) so it's definitely not isolated.Hope this can help and I'm open to any discussion on the matter. EnvironmentSelf Service+ 2.16 via jamf pro (Use Self Service+ as the default end user application) SymptomsSelf Service+ would quit and relaunch itself every time a standard user executed any policy (or when doing a check-in). Admin users were unaffected. Root causeWhen you rename Self Service+ through custom branding (via the cli as explained in the official docs), the app bundle name changes, but the jamf binary preference key self_service_plus_path in /Library/Preferences/com.jamfsoftware.jamf.plist still points to the old path /Applications/Self Service+.app.When a policy executes, the jamf binary tries to send the completion callback back to SSP via XPC using that stale path. It can't find the process, logs Co

Hello,My organization has asked me to explore whether it’s possible to control macOS login behavior based on Active Directory group membership.The goal is to automatically log out a user if they belong to a specific AD group. Additionally, as long as the user remains in that AD group, they should be prevented from logging in to macOS at all. We would also like to block all local unlock methods (password, Touch ID, etc.) while the user is in that AD group.Is this type of workflow achievable? Does Jamf provide functionality that can enforce these restrictions?

Has anyone determined a way to see how frequently Mac Apps is updating an application on a device? The scenario here is we’ve automated Chrome updates via Mac Apps. This is great and makes us IT admins happy. We have one user who complains his Chrome is being updated “almost daily”. Now I know this isn’t true but I want to capture logs to document how frequently his machine (or others) is updating apps.  Has anyone run into this situation before and seen a solution? Thanks,

Hi, My JAMF ID is working and I can login at JAMF.com fine. I have existing accounts in JAMF Now and School. If I select JAMF now it logs me straight in. JAMF school sends me to the login page and none of my passwords work. requested a password reset and nothing ever comes through! Anyone else seeing the same?

Hi Jamf Champions,We have MC1223829 – Upcoming Conditional Access change: Improved enforcement for policies with resource exclusionsThis update states that if you have Conditional Access (CA) policies that are applied to all resources with excluded resources, and if those excluded resources have OIDC scopes or a limited set of directory scopes(user.read), then such policies will also be enforced for the excluded resources.As per Jamf requirements, we have the Jamf Connect app in our Microsoft Entra ID, which is currently excluded in our CA policies using custom security attributes. With this change, the app may no longer be treated as an excluded resource, since it uses the User.Read scope.What are your thoughts on this?The change is scheduled to roll out from 27 March, and you might be impacted. 

We provide a pretty white glove service to our customers in that we run setup on every new IOS device, manually set some settings that our not manageable through an MDM, and decluttering the home screen of widgets and many native IOS apps.To be clear, I don’t want to remove or lock down the use of many native apps. I would like to remove all widgets, and remove the home screen SHORTCUTS to many native apps but leave the actual app itself available from the app library if needed.The goal is to deliver a device with a clean decluttered INITIAL layout device that has only the core native apps (such as phone, settings, messages, photos etc) and the required business apps on the main home screen page. After that, if a person wants to drag a shortcut to the calculator app (for example) out the home screen, they can do that from the app library.I realize that I can create a conf profile that HIDES apps, but I don’t want to do that because it removes access to that apps, not just the shortcut.

Hey Nation,A lot of what makes this community great isn’t what we build, it’s what you all bring to it.The answers, the advice, the time you give to help someone else out, it doesn’t go unnoticed.I wanted to share a genuine thank you to everyone who contributes, supports, and shares their knowledge here ❤️.And what better way to show that than bringing my fellow Jamfs into it  👀.So, Jamf team, let’s shout out what we appreciate about our customers!I’ll start….Shoutout to ​@scooterkohler , whose enthusiasm and desire to learn have been clear since joining the community last year. You’ve thrown yourself into the Jamf Heroes program (so much so, you’re a featured highlighted Hero 👏🏼) and have already started a user group in your area to bring others together 🙌🏼. Thank you for your energy and willingness to give back back!Jamfs, your turn next! 

Hello!In the last 2 years, I have had some Macs lose all configuration Profiles (including the MDM profile) when they try to renew the MDM Certificate (and fail for some reason)Mostly that could be fixed cancelling the “Renew MDM Certificate”-Pending task in the Management-Tab and then have the User run “profiles renew -type enrollment”. But it surely seems like a bug, when the (non-removable) MDM profile is gone.Has anybody seen something similar and a fix for it?Bye, Frido. 

Jamf Pro Dashboard (Open Source) — Looking for feedback + contributors Hi Jamf Nation — I’ve published an open-source Jamf Pro Dashboard project that connects to Jamf Pro and provides a clean, fast admin dashboard for at-a-glance visibility (the stuff we all end up checking repeatedly). Repo: https://github.com/flynn33/Jamf-Pro-Dashboard I’d love feedback (and PRs if you’re interested) on: What widgets/tiles you’d want most (smart groups, device counts, check-in failures, expiring MDM profiles/certs, etc.) Which Jamf Pro API endpoints you rely on daily Pain points you want a dashboard to solve  If you try it, tell me what you’d change or add — I’m actively iterating.

You might know Sagar Rastogi (@rastogisagar123) from his helpful replies in Jamf Nation, or from some of his Tech Thoughts blogs (here, here and here). He’s a technical architect at TCS, and he was recently named a winner in the TCS Global AI Hackathon, the world’s largest AI hackathon with more than 280,000 participants across 58 countries. It’s a huge honor, so naturally we wanted to celebrate Sagar and share more info on his great achievements.  Standing Out in a Crowd of 280,000 The scale of the hackathon alone is impressive, but what stood out even more was how Sagar approached it. His winning submission was a completely self‑driven project: an end‑to‑end AI product roadmap designed to solve real‑time challenges across healthcare, finance, and energy. His ideas weren’t just creative, but they were grounded in scalability, ethics, compliance, and practical feasibility. However, according to Sagar, innovation isn’t a solo act. It’s the shared momentum of a community pushing boundari

Looking to disable the dot macOS added to let users know that an app may have access to their camera without disabling the camera itself. We user a fleet of Macs for high-end meetings and conferences, and need to disable this distraction during screen share moments. Can someone point me in the right direction for maybe running something in a policy like a script? 

Hello All Happy New year.For those using Paltform SSO with Microsoft Entra, as anyone come across this error which seems to happen when Outlook has been left open for a period of time. It wasnt an issue before testing SSO. I though it had something to do with this setting in SSO config profile, but changing the value has’nt made much difference. ThanksTom​​​​​​​

I've noticed since we upgraded to Jamf Connect 2.4.1 last week that when I restart my computer that I am getting 2 login screens. We are using FileVault, so the expected behavior is the standard Mac login screen. We have Jamf Connect setup so that at logout you get a custom Jamf Connect login screen. Instead, I get the standard Mac login screen, I enter my password, I am taken to another login screen (with my desktop background instead of the generic Big Sur background) and I can enter my password or use touch ID to login. Thoughts? Anyone else having this?

☀️ Hey All! Our Marketing team is putting together a short video for social media to recognize Apple's 50th Anniversary, and we'd love to include a few customers in the video. If you’d like to participate, take a look at this Vouch request link to get a better understanding of what’s needed:https://app.vouchfor.com/c/Of0SDkUYpd?senderId=3ZKGbIfEhK We can’t guarantee that all submissions will make it into the final video, but if yours is fun/unique in some way, you have a good shot. 🙂 Deadline to submit: Friday, Feb. 20 Thanks, as always, for being a part of the Jamf story!!!❤️ Jeni

I just got access to jamf pro with the partner program, how am i supposed to enroll my own mac to be able to test with it?

As the title says, I just got access to blueprints and eager to start learning this, but right away i notice im missing things.  Jamf chat box told me thisYou'll need the Cloud Services Connection (Read) privilege in addition to your existing Blueprint permissions. This privilege is required for app installation functionality within Blueprints. To resolve this, you can: • Contact your Jamf Pro administrator to add the Cloud Services Connection (Read) privilege to your user account • If you have a custom privilege set, ensure it includes both Blueprint permissions and Cloud Services Connection access Once these privileges are added, you should be able to access app installation features alongside the declarative configurations you're currently seeing.Now after checking everything and confirming with Chatgpt,  I am being told App installations in Blueprints are not Enabled at the Tenant Level.  Something about being a Backend feature flag.   i am unsure how to proceed with this. Any help