Hello everyone, We are currently facing an issue with Jamf Connect where some users keep receiving the notification: "Registration required - Register with your Microsoft Entra password on your Mac." Our Setup: Jamf Connect installed manually on affected devices Devices manually registered in Company Portal MacOS 15.3.1 Latest version of Jamf Connect & Company Portal Devices appear as compliant in MS Entra Devices in Jamf Managed &Supervised uniqueIdentifier" : "97BD-IUHGLD-LIUGHW7G-.....ETC." FileVault 2 Partition Encryption State:Encrypted Troubleshooting Steps Taken: Verified compliance status in MS Entra Deleted the device from MS Entra and re-registered Cleared keychain entry: /Users/testuser/Library/Keychains/65649DB6-A89B14CE16E0E Ran a script to reset Entra registration, which: Quits Company Portal Deletes related preference files and saved states Removes keychain entries and identity preferences Deletes the MS-ORGANIZATION-ACCESS certificate Reinstalls

Hello All, I am very new to Jamf Pro and Im trying to teach my self how to build packages and deploy them in our test environment.   I am having a problem with an app downloading to my Macbook using Jamf Pro  I have built the package and it shows up in Self Service.  But when I download it, it said Installed but it does not show installed on the MacBook. I checked the policy logs and it show it starts to install the app but then it closes the packages.  I have included the steps from the log [STEP 1 of 4] Executing Policy Steam [STEP 2 of 4] Downloading https://diamond.jamfcloud.com/jcds/downloads/steam.dmg... Verifying DMG... Verifying package integrity... Installing Steam... Closing package...

Hello,   We are selling our old Macbooks and I have a dilemma. We just got out ISO 27001 cert last year and to keep it we would need to securely wipe and have a record of said wipe before we sell the macbooks. My question is remote "wipe computer" command going to completely wipe the device and make the data unrecoverable (making it ISO 27001 complaint) and is Jamf pro keeping a record of these wipes somewhere where I can get back to them in case of an audit? Thank you

Hello, We have been doing different things for different packages. But what is the best way to superseed a policy/package? As in if a software releases a new version and you want to update the version you are using right now to the newer version. Mostly we have been creating a new package and policy, and then deleted the old package and policy.

How do you all keep your Mac Clients on the latest MacOS Version? Is there a way to force an Upgrade? Because the "new" Software Updates Option doesnt do anything for us. When we try to trigger updates on the Clients nothing happens. 

Does anyone have an extension attribute that will return the version of Jamf Connect a Mac is running? Our 'Patch Management' tells me we've got various out-dated versions floating around in our environment and I want to gather all of these into an Advanced Search or Policy so I can take action.

I have looked through the policies that are able to be created in JAMF and can't find anything related to what I am trying to do.   We have iMacs in classrooms connected to a projector and the iMac is defaulting to extend and would like for the default to be duplicate. Any suggestions?     

Hello,I just updated JAMF Connect 2.45.Unfortunately, it's in English and doesn't seem to recognize the laptop's region. Is there a setting to force it to French?

If Jamf Admin is being discontinued, How do we index a package without it for an uninstall?

OK, so I have a smart group that shows Macs that are on Mavericks but have not upgraded to 10.9.4 yet, and I have the Apple 10.9.4 combo updater in Casper Admin, and I have a policy that installs the 10.9.4 combo updater, scoped to the smart group that shows Macs that need the upgrade. This part I love, it's fantastic. The problem is that on an inordinately large number of attempts, the install fails, and the error every time is that the package could not be verified. But more than half the time it works with no verification error. This is an Apple updater, it's checksummed, there should be no verification issue here. So what's up, Doc ? Actual message from the log: Verifying package integrity... Installation failed. The package could not be verified. So why would it work on most machines, but fail on a lot of them? Will I need to disable verification to get it to work consistently? Is there some underlying issue I'm not aware of? Thanks for input.

Today we are releasing Jamf Pro 11.15; highlights include: Declaration Configurations with BlueprintsBlueprints simplify the creation of complex workflows by leveraging declarative device management to ensure devices meet a particular management state. You can use blueprints to scope management settings to devices using customizable components that include payloads and their configurable settings, all in one location. Using declarative device management enables devices to proactively and autonomously apply the scoped management settings and report state changes to the MDM server asynchronously, streamlining the device management workflow.SSO Prerequisite: Blueprints requires that OIDC-based single sign-on (SSO) authentication be set up and managed in Jamf Account. For more information, see Single Sign-On (SSO). Apple Intelligence Restrictions for Computers and Mobile DevicesNew settings include restrictions for external intelligence workspace IDs and Notes transcription summary. &n

Hi, Is anyone getting this error with the Jamf Connect Login window? We are Using OKTA and JAMF Cloud. I have logged a ticket with Support and we tried recreating the profiles(login, license, Jamf Connect), scoping and unscoping to specific machines etc. Each time I log off/restart the machine loses the license. Checked /Library/Managed Preferences/ and I can see the Jamf Connect plist(s) with the license keys. Can see my profiles in System Prefs. I know the license file is valid as it will sometimes license at random then 'disappears' after log off.

I was recently working on performing some testing to find out why we are having problems with policies that install apps using an install package. We noticed that the packages would fail to download successfully. I created a policy that runs a packet capture while an application install policy that contains a package payload is running. The packet capture along with the Jamf log, and some other data all get zipped up and uploaded to each computer's inventory as an attachment. This enabled me to get the data I needed without having to ask the user to provide the data to me. I got the logs and other data that I needed to get help finding out what is causing the failed package downloads. This process created another problem. Over 100 Mac inventory records had multiple attachments from the multiple tests I ran. Jamf Pro does not provide an easy and automated way to delete the attachments. The API does provide a delete function. To run this function, we need to know the computer's Jamf ID a

Greetings all, We have recently migrated our Jamf Pro instance from on-prem to the cloud product.  We are now looking for best practices information and suggestions from others who have made this move and changed the way that they had implemented things locally.  We made a fair sized jump (from late v10 to current v11, for various reasons) and some things definitely changed in that gap.  For instance, the way that LAPS handles the password rotation and loses the cryptographic linked capabilities.  One of the things we are particularly interested in is how to keep a secure environment (e.g. no "one account and password to rule them all" situation) but still have the token information needed for doing things like OS updates. But, frankly, any suggestions are welcome.  We have a bit of a grace period for organizational changes here during the migration project, and we want to take full advantage of it.  We are working with consultants (Rocketman Tech) through

Hi everyone, Since the update of JAMF Connect to V2.43.0 we've had a couple of devices getting an error messages saying that "JAMF Connect is Damaged and can't be opened." On investing this further we have found that "JAMF Connect was blocked from use as it is not from an identified developer." I'm curious why this would be.

Hi Jamf community, Recently, a user reported a pop up that appeared talking about Jamf depreciation. Is this something anyone else has encountered? Is this going to be an issue?    

We are excited about recent updates that make Chrome on macOS easier to deploy and manage. Our work with the Google Chrome for Enterprise Team is ongoing, and this first release benefits not only Jamf Pro admins, but everyone who manages Mac at scale. Look for more information in the form of a blog, but here are the highlights: Updates to the installer - Chrome is now available as a PKG in addition to the standard DMG. This is the preferred installer format for mass distribution, and is available from the Chrome Browser Enterprise Installers website. Initial Support for Application & Custom Settings - Chrome Browser Cloud Management (CBCM) is a a single location to set Chrome policies on multiple platforms. Google simplified the process of deploying the enrollment token by leveraging Jamf's new Application & Custom Settings payload. This work comes from user feedback and @alexbauer from the Chrome for Enterprise Team is joining this thread to hear your thoughts! Chrom

Hi all,I'm running in an issue concerning the installation of the OpenVPN app.Basically I've deployed the after converting the .app into a .pkg via Composer, and the app works just fine untill our users need to connect via profile. If the user tries to connect to the VPN they are greeted with an error. My issue is that, if I try to download the application using the original .dmg file (but that needs an admin login, that our users don't have) and run OpenVPN afterwards no error occurs and both the profile and the app work just fine 100% of the time.I think this leaves me with 2 options: either let our users download and install OpenVPN via .dmg but without any need for an admin password or I need to push to our users every file that the .dmg install on the computer and not just the .app.I'd really like to go for the first option since it could be useful in plenty other situations but sadly I don't know how to do neither of them.Thank you for the help!

Hey everyone. I was recently asked to upgrade our GlobalProtect to 6.0.7. After some extensive searching on JAMF Nation I was able to piece a good script together that will add your portal connection(s) to the install. Create your package and the following script...#!/bin/shsudo rm -f /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist## Set the portal address for GlobalProtect#portalAddress="YOURCONNECTION"## Modify PLIST to reflect the correct portal address.#echo '<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Palo Alto Networks</key><dict><key>GlobalProtect</key><dict><key>PanSetup</key><dict><key>Portal</key><string>'$portalAddress'</string><key>Prelogon</key><integer>0</integer></dict></dict></dict&g

Hi all - We got PSSO working with our Okta preview environment and thought the setup for our production environment would be easy using the article by Sean from Jamf. However, we are hitting the same issues during registration when after the user input their password, the registration is not available (see screenshot).  Also, I've noticed all articles references the okta preview environment. Has anyone gotten PSSO to work in their prod environment with a custom domain (e.g., companyname.com, login.companyname.com, etc.) vs. the standard company name.okta.com?  I have reached out to Okta who suggested we add desktop password sync in addition to their PSSO article and we are still having the same issue. 

We're in the process of configuring another Jamf instance for a separate group. One issue I'm running in to is with a specific package we created using Composer. After a tech enrolls the device, they run a self-service Audit Check and it checks to make sure the 6 security tools are running. When it runs, it copies a script to the /Shared folder and then runs the script. We use the same package in our Prod and QA site, but for the new site, when you run it, it always errors out. I've even tried creating the pkg again.Error Downloading https://xxx.jamfcloud.com/jcds/downloads/Audit_Script.pkg... Verifying package integrity... Installing Audit_Script.pkg... Installation failed. The installer reported: installer: Error - the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Audit_Script.pkg'.  

Hi,We have a computer lab, fully ethernet and we've always turned off wifi (using a simple JAMF policy running on startup) to avoid confusion.  We recently upgraded to Sonoma and have had reports of users complaining as the wifi is popping up asking for credentials persistently.  On further investigation we've noticed that if you turn wifi off, but then sign in with a new user, wifi is automatically turned back on.We can fix this by changing our policy to run on 'login' as well as 'startup' but just wondered if others had observed this behaviour, and if it can be attributed to Sonoma or some other update?Thanks,Lawrence

I have a 2019 iMac running Sequoia that uses the same Connect setup as 700 other systems that is showing this error message. It only seems to come up when logging onto the system using an ID that was created a long while ago. I tried using an account that hadn't been used on this system before and it works fine. And continues to work fine for that new ID. Nothing has changed in our EntraID configuration and it is currently working fine for systems in that lab as well as all across campus.  Any ideas?  

Does anyone possibly have a bash script to uninstall Cirrato? I have tried many things without success.I know that Cirrato isn’t a very common software, but I give it a try here anyway.

I'm currently trying to setup a group of iPads to function as kiosks that are locked to a browser window that the user can't get out of. Previously for this we used a combination of an app called Managed View and Guided Access, however since we now have Jamf, we want to be able to configure this through Jamf Pro so that we don't need to manually setup iPads to function this way. I've followed all the documentation I could find relating to Single App Mode, however whenever I try to push out the config profile for enabling it I simply get a "failed" message in the Jamf Pro logs. This app definitely supports SAM and ASAM, so I'm confused why it is proving so hard to setup. I can get the app deployed and working just fine, however the config profile to limit users to just the app is proving to be very difficult. Any advice? I'm considering having a go at a different Kiosk app but the one I'm working with has better documentation than most.