We previously reported three issues affecting devices running iOS/iPadOS 26.1:
-
Jamf Trust App configured with ODCF in Hidden-App Mode Results in Connectivity Loss
-
Update Process of Jamf Trust App Configured with ODCF May Hang Resulting in Connectivity Loss
-
Jamf Trust App configured with Zero Trust Network Access (ZTNA) in Hidden-App Mode Results in Resources Behind ZTNA to be Unavailable.
We are continuing to work closely with Apple, who has identified and resolved the underlying root cause. A permanent fix will be included in an upcoming iOS/iPadOS release.
The behavior can occur with any on-device content filter or VPN deployed on iOS/iPadOS 26.1, across multiple MDM environments when used alongside Screen Time restrictions, App Usage controls, or Kiosk/Single App Mode.
The following issues remain relevant until the upcoming iOS/iPadOS update becomes available:
1. Jamf Trust App Configured with ODCF in Hidden-App Mode Results in Connectivity Loss
When the Jamf Trust app configured with ODCF (or alternative ODCF app) is put into hidden-app mode, the device loses internet connectivity.
Conditions to trigger the issue (all must apply):
-
Device is running iOS/iPadOS 26.1 and is configured with ODCF vectoring.
-
Jamf Trust is hidden via Kiosk Mode, App Usage configurations, Allowed Content Rating, or Screen Time restrictions.
-
The device is restarted.
Outcome:
-
Device loses internet connectivity, including connection to the MDM.
-
Recovery requires a full device wipe and reinstall.
2. App Updates May Cause Connectivity Loss for On-Device Content Filters
An intermittent issue may cause ODCF-based filtering apps, such as Jamf Trust, to hang during the update process, which can result in a loss of internet connectivity.
Conditions to trigger the issue (all must apply):
-
The device is running iOS/iPadOS 26.1 and is configured with an on-device content filter.
-
The filtering app is being updated.
-
The device is on an unstable or poor network connection (though this may not always be required).
Outcome:
-
The app installation process hangs indefinitely.
-
The device loses internet connectivity, which is not restored even after a reboot.
Note: This issue is intermittent. Many updates complete successfully even when all conditions are present.
3. Zero Trust Network Access (ZTNA) Functionality Is Affected if Jamf Trust is put into Hidden-App Mode
This issue impacts devices using ZTNA when the associated filtering app (Jamf Trust or other ODCF tools) is hidden or restricted.
Conditions to trigger the issue (all must apply):
-
The device is running iOS/iPadOS 26.1.
-
A filtering or Jamf Trust app is hidden via MDM, Screen Time, or Kiosk/Single App Mode.
Outcome:
-
ZTNA remains functional until the device is rebooted or VPN is manually disabled.
-
After reboot or manual disablement, the VPN cannot be re-enabled by the user.
-
Network connectivity remains available, but protected resources cannot be accessed.
-
Unhiding the app does not automatically restore VPN functionality.
Note: Behavior may vary. Some devices disconnect immediately when the filtering app is hidden and reconnect when it is visible again.
Updated Guidance
Apple has confirmed that the underlying issue has been identified and resolved, and a fix will be included in an upcoming iOS/iPadOS release. Until that update becomes broadly available, we recommend the following steps for any environment using on-device content filtering solutions:
-
Do not use Screen Time restrictions, App Usage controls, or Kiosk/Single App Mode to hide VPN and content filter apps on devices that are already running iOS 26.1.
-
Do not update devices to iOS/iPadOS 26.1 when an ODCF-based filtering or VPN tool is deployed
-
Remain on iOS/iPadOS 26.0.x to avoid potential service disruption.
-
Thoroughly test the upcoming iOS/iPadOS release in pre-production environments before deploying at scale.
To support the guidance above, Jamf has temporarily paused out-of-date OS notifications for iOS/iPadOS 26.0 and 26.0.1 to prevent you from being prompted to update to iOS/iPadOS 26.1.
If you are using another MDM provider or a third-party ODCF solution, we recommend working directly with that vendor for platform-specific guidance and update deferral instructions.
These recommendations apply across all MDM platforms and all on-device content filtering vendors.
Need help?
For additional questions or assistance, please log in to Jamf Account with your Jamf ID and click Contact Support in the upper right-hand corner.
To reference earlier details about this issue, please see our previous announcement.