Hi there, I cant find any documentation on this but is there any possibility of hosting documentation/videos in custom categories in self service? Other than having to script a download of documentation to home screen. 

When binding Macs to our domain we will import a computer cert so that the users Mac will be able to connect to our VPN and enterprise connect (can't do so without this cert). I have a user who is having this cert get auto removed from keychain and thus making him unable to connect to internal resources when working remotely. The cert that we import comes from our CA and is verified upon being imported.My question is, is there a way I can look and see how/why this cert was removed?

Performing a phased rollout of JamfConnect 3.5 and SelfService+ Don’t want to make SelfService+ the default but I do want to uninstall SelfService Classic to avoid confusion for the end user..  What is the best way to do this?

With quality-of-life improvements for both end-users and Mac Admins alike, version 1.4.0 is what version 1.0.0 should have been from the start A fresh update to Mac Admins’ new favorite, MDM-agnostic, “set-it-and-forget-it” end-user messaging for Apple’s Declarative Device Management-enforced macOS update deadlineshttps://snelson.us/ddm 

Update as of 4:25 PM CST on December 18, 2025: Apple released iOS/iPadOS 26.2 on December 12, 2025. Our engineering team has tested and confirmed that the connectivity loss issue described below is now resolved in this version of the operating system. It should now be safe to update to iOS/iPad 26.2.However, our recommendation remains unchanged: do not hide Jamf Trust, as doing so may still lead to issues with content filtering and Zero Trust Network Access (ZTNA) not being applied properly. Before deploying widely, we recommend testing iOS/iPad 26.2 in your environment to ensure compatibility with your specific configurations and workflows.With the release of iOS/iPadOS 26.2, we have also re-enabled out-of-date notifications for devices running iOS/iPadOS 26.0 and 26.0.1.  We previously reported three issues affecting devices running iOS/iPadOS 26.1:  Jamf Trust App configured with ODCF in Hidden-App Mode Results in Connectivity Loss  Update Process of Jamf Trust App Configured with

Good morning JAMF NATION Usersrecently when i enolled machines and dep is ran instead of the user logging in with their SSO account they are met with create a local log in account setup page, this has started once we went to tahoe is there a fix for this

We are a Jamf partner company based in far east asia country.We are currently working on a project to build a Jamf Pro On-Premise environment.The deployment is being configured in an AWS environment, using an ALB for redundancy and failover, and Aurora RDS MySQL as the database.During the setup, we have realized that receiving technical support for On-Premise environments from Jamf’s engineering group is extremely difficult.and in Jamf CS response, It also appears that Jamf expects the database user to be granted full privileges by default. From a security perspective, however as we knews well, there may be cases where restricting certain permissions is necessary…Because the quality of engineering support from the Jamf vendor is not satisfy, our satisfaction with collaborating as a partner is also not very high.in present. In this project, the customer and our partner company are testing every issue on our own and resolving them step by step as we move forward.Although I am writing thi

 In addition to an issue we previously reported in which "hiding" Jamf Trust results in broken device connectivity due to ODCF, we have identified two related issues. We are working directly with Apple to investigate and validate potential recovery scenarios. 1. Jamf Trust App Updates May Cause Connectivity Loss An intermittent issue may cause the Jamf Trust app update to hang and result in a loss of internet connectivity.  Conditions to trigger the issue (all must apply):  Device is running iOS 26.1 and is configured with ODCF vectoring.  The Jamf Trust app is being updated.  The device is on an unstable or poor network connection (though this may not always be required).   Outcome:   The app installation process hangs indefinitely  The device loses internet connectivity, which is not restored even after a reboot  Note: This issue occurs intermittently. In most cases, the update succeeds even when all conditions are met.   2. Zero Trust Network Access (ZTNA) Functionality Is Also

I’ve created a banner under the self service branding options (and based it on the recommended size that is suggested). The banner looks great however I have noticed that depending on my screen size the banner can stretch infinitely into being ridiculously huge. It doesn’t constrain itself to the maximum proportions. To replicate the issue, all you need to do is manually resize the self service plus window. I auto push self service plus to my mac endpoints and it looks like I’m currently on Self Service+ Version: 2.4.1 (2.4.9250708.2). From a design point of view I do not feel that is a positive user experience. Is this just a me problem?

We have discovered a compatibility issue between iOS or iPadOS 26.1 and Jamf Trust or other On-Device Content Filter (ODCF) tools when using hidden-app mode. This issue impacts internet connectivity for devices that meet the following conditions:  Running iOS 26.1 or iPadOS 26.1  Jamf Trust (or alternative ODCF app) deployed in a "hidden" state  The device is restarted  This can also occur when using Kiosk Mode, App Usage configurations, Allowed Content Rating, or Screentime restrictions. Recovery from this state requires a full device wipe and reinstall. If you are currently on iOS or iPadOS 26.0 or earlier, we recommend that you do not upgrade to iOS or iPadOS 26.1 until this issue is resolved. If you do plan to upgrade to iOS or iPadOS 26.1, we recommend the following actions to ensure that Jamf Trust is accessible and visible on all devices it is installed on:  Remove App Usage configurations that hide Jamf Trust  Disable Kiosk Mode  Do not apply Screentime controls or Allowed

Hello, We are in the process of setting up Microsoft Defender for Endpoint on our Mac devices using Jamf PRO. We have been successful in doing so using the documentation provided by Microsoft. However, we are running into a few issues. We are unable to get the 'Valid User' and 'Configuration Status' to populate. See pictures attached.  

We got a student iPad which has an unusual behaviour.The user chooses an app from the student app to install it. After the installation I saw that the app disappears directly. It’s not hidden. It’s deinstalled. In Jamf it shows the App is installed.Any idea what causes this?

Hello everyoneOne of our users is having strange wifi problems with his Mac M1 Max after device enrollment:In phases the wifi connection randomly disconnects and reconnects several times in second intervals. The problem doesn't just appear with one specific network, but it appears with other networks too.We have tried some of the standard processes, such as resetting PRAM, deleting wifi setting files etc. and finally reinstalled the Mac. After reinstalling and new enrollment, the problems were back. We suspected a hardware defect, but the repair center could not detect any hardware defect.The user then used his Mac for 9 days without enrollment. During this time, the problem did not appear. Now the device has been enrolled again and the problems have reappeared immediately after the installation. There seems to be a conflict in connection with our enrollment.We manage around 200 Macs with an M1 X chip and none of the others have these problems.The user has given us the affected device

Working on setting up a few shared machines and I was asked to force Safari to always be in Private Browsing. Chrome has that ability in the plist but I don’t think Safari has the same. If that isn’t possible, we would also be OK with clearing browsing data when Safari is closed. Is there a way to do either? I haven’t found anything like that on the interwebz. Thanks!

I have created VMware Fusion 11.5.1.pkg file by using Composer/Package tool. while I tried to install it in new Mac installed successfully when opening the VMware Fusion getting attached error. if I use the same package for upgrade the VMware fusion from older version to new version(11.5.1) it works. Does anyone know how to do this?Any help would be appreciated. Thank you

Hi, I have an issue with one my macbooks. It is not checking in with Jamf since a week after it was enrolled. I’ve run the following commands on the affected macbook. Sudo Jamf ReconSudo Jamf policySudo Jamf checkJSSConecction   These haven’t fixed the issue. The macbook was enrolled by user-initiated enrolment by going to our server url /enroll Do you know what else I can do to resolve this issue thanks

It’s already November, and that means the end of 2025 is clearly in sight. Can you believe it? It’s been an eventful year at Jamf, especially for the Jamf community and User Groups!  Earlier this year, we officially launched the User Group program with the goal of connecting as many Apple Admins as possible. We created a starter kit to help new groups get up and running, complete with all the information and resources they need. We also introduced a brand-new community platform, featuring a User Group landing page and an interactive Groups map that displays all the groups around the globe.  It’s been a great year!  To end on an even higher note, we want to give an extra boost to all the groups thinking about getting started. We’ve heard from several soon-to-be User Group leaders who are eager to start but haven’t yet hosted their first meeting. While it’s a busy time of the year, it’s also the perfect time to gather your community, whether in person or online. To help make that happen,

Hello all!We want to give an extra boost to all User Groups that have expressed interest in starting but haven’t yet hosted their first meeting. It’s a busy time of year, but also a perfect moment to kick things off with your first gathering, whether it’s in-person or online. That’s why we are doing a special ‘holiday bonus’ promotion for all new User Groups started between now and the end of the year.  🎁 User Group Holiday Special ⛄️ Here’s what’s in store for new groups who host their first meeting before the end of the year:  Double budget for your next meeting when you host your first one before year-end  1,000 Jamf Nation Rewards Byte points for User Group leaders who host their first meeting   Flexible format: Meetings can be in-person and social, or online and interactive  Optional holiday Kahoot hosted by me or a team member to add some festive fun to your online gathering  Please reach out if you have any questions or would like to take part and get your group going tod

I am trying to test out Single App Mode so we can fulfill a request a user has when their new Ipad comes in. They want it to only allow access to Safari and not allow any websites except the sign in page they set up. I have been able to restrict other sites with no issues, but the Single App mode is causing me issues. I created a Configuration Policy and selected Safari from the Lock to App drop down. When I scope it to my test group, it does attempt to apply, but fails due to "The field “Identifier” contains an invalid value.". Even when I chose "Specify Build ID" and enter "com.apple.mobilesafari" as the build ID, I get the same error. This happens for all apps in the drop down.I have confirmed the Ipad is supervised and all other settings I set up have applied with no issues. It is just this one thing that will not apply.  Any assistance anyone can provide would be appreciated. 

We are using Jamf Connect and one of the Login Window configurations is to display an RTFD document with our EULA. Prior to version 2.45.0, and the big interface change, the Eula displayed like in the following image:On newer version it now displays like so:It seems the only way to center the text is to push the margins in the text document to something like the following. Left: 5.75” and the right 14.75” for the following result (I am still playing with it):We don’t want the text spanning the entire white space at it makes it more difficult to read unless the font size is increased significantly. Also still unsure how this will be affected on different display sizes.So the question is there a better way to handle this?  

Updated to JSS 11.22.1 last week and I am no longer seeing a “New” button on the Computer->PreStage Enrollments page (it is there on the Devices->PreStage Enrollments page). Tried both Chrome and Safari with same result. Anybody else having this issue? I did hit the support portal to raise the issue but all I’ve gotten so far is “It works for me” which is less than helpful.

Why is there an option to only scope this to 1 smart group? While every other policy that installs apps lets you scope multiple things. Or am i missing something? 

I was planning to send a message to end user through Swiftdialog via a JAMF policy but it has to be after a specified time like after 50 mins or 80 mins. Any way is there? I cant see any such flag in Swiftdialog, if anyone knows about it please let me know. 

I have some policies which daisy chain from one to the other because they use the same Custom Event.  They are numbered at the beginning of each policy name just so I can control the order they execute.  The whole chain gets triggered by using an excellent script from Richard Trouton https://derflounder.wordpress.com/2017/04/08/running-multiple-jamf-pro-policies-via-custom-trigger/I’m trying them in Self Service+ and it looks like Self Service+ stops showing that the policy chain is still running.  When I check the jamf.log the policy chain is still running - it’s just Self Service+ that thinks it’s doneI mostly use this for an initial setup chain of policies so I can make sure they run in a particular order.Is there anyone else doing this sort of thing and have you seen this behaviour?  Any thoughts? 

We’ve got FUS disabled through a configuration profile, but it appears the menu bar/control center extra bypasses this setting. Users can enable the extra and then use it to switch accounts.Not a major security issue I don’t think, but my org doesn’t use FUS. Is there a way to block specific menu bar/control center extras?