All the existing devices in our system stopped updating inventory on 21th-26th February. Any devices added since then are updating ok. How do we rectify this bug and what caused it? We cannot delete and start again on 200 devices.

Has anyone had to renew the built-in CA in Jamf Pro before and if so, mind sharing your experience with it?  I'm primarily curious how many devices ended up having to unenroll and re-enroll as a result of MDM profiles failing to renew.  With over 11,000 Macs in my environment, the suggestion shared by Jamf support by disabling automatic MDM profile renewals before renewing the built-in CA, then issue MDM renewal commands manually to no more than 100 devices at a time isn't realistic in my environment, especially when both the smart and the static computer groups aren't designed to group devices strictly by quantity into groups of 100 that easily.

We are deploying Xcode as a Mac App (VPP).  Apparently after updates it is requiring admin creds to accept the End User License Agreement.  I am stumped on how to fix this one.  There’s not much I think we can do with Mac Apps.-Pat

Apple's Terms and Conditons have been updated ...   

Hi everyone, we are currently exploring the Jamf Security Cloud and it’s capabilities with Jamf Trust app.So far we were able to create a connection between our Jamf Pro instance to Jamf Security Cloud, along with Entra ID for IdP integration.Current configuration deploys a Jamf Trust activation profile to end devices via Jamf Pro. However, I was wondering if the Jamf Trust app automatically gets installed via the activation profile. Or is there another process we need to configure to deploy the Jamf Trust app to end devices (for Mac and iOS). I would appreciate any expert’s opinion on how a typical Jamf Security Cloud and Jamf Trust configuration and deployment would get configured on end devices. Thanks in advance!

Hey all,Im using the JAMF Pro in house dock settings to remove apps though have hit a dead end with three Apple System Apps: Facetime, Apple TV and Apple StoreIm just wondering what is the best method for removing these last 3 from the dock. I have tried getting assistance from the JAMF Helpdesk and  even with their assistance we were unsuccessful in finding the correct path to remove these with the in house option.If anyone could walk me through another method I would be very grateful.

Hi all, I have a policy running a script and restart options enabled. A restart message is also in place under “user interaction”. Everything is working fine so far. However, if the script is triggering an exit code other than 0, I want to stop the policy without restarting and showing the restarting window. Ist that possible? Or is there any workaround? Thanks, Stefan

Hi everyone, we have recently bought a Brother MFC-L2800DW type printer and I was wondering what would be the steps to deploy it and configure it. It will be our first printer installation so we are very new to the process. CUPS and IPP and PPD shows up in many places.We want this printer to be a network attached printer and I think we need to also deploy a driver as well, I am assuming. I would appreciate any expert’s opinion on what would be the default way to configure a network attached Brother printer. Can we use macOS built in generic PPD file? Or We need to deploy something frmo Brother printer’s end? Thanks in advance.

We are a K-12 school district migrating from Jamf School to Jamf Pro I have already rostered our students and classes.Only able to begin device migration after school ends. As there can only be one MDM to rule them all. And our students and staff are still using Jamf School.I am starting to build our our profiles.I noticed that you must create separate profiles for iOS and MacOS. No way to share profiles between them? I was just thinking it would be nice to share for wifi/networks and what not.Working on trying to get our macOS profiles for wireless working after a device wipe.It does not seem to be working. Which will mean we have to hardwire these devices. Has anyone got this working. I have added the profile to the pre stage. But like I said, it doesn't seem to work on return to service.They Does any have some important tips, blockers and solution they would be able to share?

With the recent release of the M5, we’ve been trying to connect MacBook Pro’s to our 802.1x secured Wifi Network.We’re using the same configuration profile that has worked on the rest of our fleet.  Our network team have looked at the logs and have determined the issue is on the endpoint side “WLC keep sending EAP-TLS request and no response from client”.Wondering if anyone else has encountered this issue and what if anything was done to fix it.Thanks

Since NoMad has stopped working with the new macOS 26, we are looking for its replacement.We tried implementing JAMF Connect, but since we use ADFS, JAMF Connect is not compatible.Can anyone suggest any other replacement for NoMad, which can work as a password sync between Mac devices and our Entra environment.Thanks

Today we're opening the public beta of the Platform API Gateway – a single, unified way to access any combination of Jamf APIs, current and new. You manage all of it from the new Integrations space in Jamf Account.Jamf is no stranger to integrations. The Platform API Gateway takes that further – one place to manage access, one consistent way to authenticate, and a growing set of APIs that cover the full Jamf platform. Unify your workflows, reduce friction, and realize the full value of your Jamf journey.As Apple continues to grow in the enterprise, the way organizations build, automate, and integrate is evolving too. Workflows are becoming more extensible, more autonomous, and more agentic – and we want Jamf to be the foundation customers and partners build on to get there. The platform that manages and secures millions of Apple devices worldwide is opening up fully – rooted in what you know, built for what's next.This beta is the first step.What

I was creating a configuration profile to setup a webclip that redirects to a URL. I accidentally put a name for the bundle ID: com.apple.webapp with an XYZ name and now Jamf has made that association and has changed or plugged in that XYZ name into all my other profiles that have that bundle ID. This created a bunch of orphan icons on a test device I was working on. How do I remove remove that? I am working to remove that bundle ID in all my Restrictions profiles, and will have to reset my devices. SOS! I am new to jamf, so def learning as I go. 

I am having hard time deleting smart user groups, I get the spinning wheel when I click on delete. The groups are empt. So annoying! 

Hello, I’m hoping someone has some insight into this issue. I have two internal distribution points that run on Mac minis. They have both been up and running for several years. Recently, one of them stopped working after I renewed the SSL certificate. I accidentally let the certificate expire by less than a day. Now, after renewing the certificate, I can’t get it to serve files over HTTPS anymore.  Here’s what I have done so far:- Renewed the certificate several times- Verified that the certificate information is correct and matches what is listed in Jamf- Verified that the setting in my httpd.conf and http-ssl.conf files- Restarted Apache (multiple times)- Restarted the DP that is not working- Compared the settings of the DP that is working with the one that is not-re-entered the password for the jamfread account in Jamf and on the passwords file on the DP- Pasted the link for one of the files that

Apple Business Manager is now just Apple Business.Remember to log in and agree to the new terms and conditions so that devices can continue to be added.https://business.apple.com/ 

Does jamf offer a better setting for how to find the Approximate location of the device (iPad) on the Jamf School system. Other MDMs show the location much better. Is there something that I am doing wrong? Please advise.I am using Jamf School.

I just got to 250+ “bytes”!  That XL Gamer Desk Tech Mat is so close…I am dangerously low on swag.  Seriously, I only have the jamf shirt I goyt when I got my CCT.-Pat 

I am seeing a Keychain not found alert after I recently started enforcing OneDrive Desktop and Documents sync. This just happened on my newly enrolled test Mac after I registered platform single sign-on. The alert appeared as I was logging in to OneDrive. There is actually an entry in Keychain. I looked up the ID shown in the screenshot. Reset to Defaults is NOT the right choice. I found that unlinking the Mac from OneDrive and then signing in again helps, but this prompt came up as I was in the process of logging in. We use platform single sign-on so there is no password prompt. Has anyone else seen this and solved it? 

Hi Guys,We are facing very weird issue at our Orgs, where none of the packages are getting installed during enrollment for some devices. The issue is not for all the devices, and usually for few devices but been having this issue once in a while.All the packages are signed, and works perfectly fine for most of the device. And for god sake, we cant replicate this issue whenever we do a testing.Those devices who have issue with package installation, usually works once wiped and re-run the enrolment process.Does anyone have idea on how to get this sorted?

Not sure if I am the only one experiencing this or not. We are using code 42 and some users folder /Library/Application\\ Support/CrashPlan was deleted. The app cannot be removed because it is locked and the uninstall script cannot be run because the aforementioned folder has been deleted. We also cannot reinstall the backup agent as we get a "Install failed contact the software manufacturer" error message. Has anybody experienced this and found a fix? I tried using the uninstall script from another computer but it failed saying that the script is not originally from the computer. 

New and somewhat confused JAMF-user here, and thus: silly questions.I'm using Entra as my Cloud Identity provider and I'm trying to create a smart user group based on membership in an Entra-group (JAMF_KLA) in order to build configurations for said usergroups. But I cannot for the life of me get it to work (nor do I know if it's actually possible).Looked at the mapping of both the SUG and in the CIP-setup, and everything there looks like it should work. Can also do a test against various users, and it works (User that is in the Entra-group gets green checkmark, user that is not in group gets red checkmark). Which tells me that the lookup is working.I see that I can also add users from a Directory Service from the Settings-menu. However, is that only for admins/auditors? I see that there's an option for Enrollment Only. Does this mean that the imported users do *not* have access to the JAMF-console?

Fortinet's recent FortiOS 5.4.1 release for their FortiGate security appliances prevents any version of FortiClient prior to 5.4.1 from registering to the appliance. Users may even get a "FortiClient is being actively blocked from registration" which can cause panic and confusion. The problem is that, as of this writing, FortiClient 5.4.1 has yet to be released. Talk about putting the cart before the horse. So let's say that you don't want to have a few hundred upset users and would rather uninstall FortiClient discretely, en masse. Fortinet's documentation tells you to run the FortiClientUninstaller GUI app to uninstall FortiClient. But here's a more streamlined and scriptable method: /Applications/FortiClientUninstaller.app/Contents/Resources/uninstall_helperrm -rf /Library/Application Support/Fortinet/ Optionally, check for the existence of the following file and delete if it exists/private/var/root/Library/Prefer

Jamf is thrilled to announce the brand-new Jamf 140 Course; a free, self-paced course that builds foundational skills to manage, secure and deploy Apple devices in K-12 environments.Check out the blog post about the 140!

A complete, step-by-step deployment guide - including macOS Onboarding and Jamf ConnectAuthor: Meir ElimelechWith contributions from: Omer Ninyo / ​@Ninyo Why this guide exists – and who should read it Jamf’s move to make Self Service+ mandatory for macOS has prompted many organizations to re-evaluate their deployment and enrollment workflows. While Jamf’s documentation covers the supported installation and migration paths, real-world environments often include a mix of enrollment models, identity integrations, and timing-sensitive workflows that are not always addressed in isolation.This guide exists to provide a single, practical reference for migrating to Self Service+ across all common macOS scenarios — from brand-new enrollments to existing fleets, with or without Jamf Connect.It is intended for Jamf administrators, part