Important notice: This version is intended only for on-premise environments. Jamf Pro 11.20.2 will not be mass deployed to Standard Cloud environments or posted on Jamf Account for manual hosted upgrades. Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved Issue Jamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI141565] Jamf Pro 11.20.2 includes Tomcat 10.1.44, resolving a known security vulnerability in a third-party library (CVE-2025-48989). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.  

Important notice: Beginning with this version, Jamf is no longer sending maintenance release email messages. We will continue to send Jamf Pro release announcement email messages for major and minor releases (e.g., 12.0.0, 11.21.0, respectively). Today we are releasing a maintenance version of Jamf Pro; highlights include:Resolved IssuesJamf Pro Server[PI134363] Fixed: When configuring a computer configuration profile with a Network payload with "Any ethernet" selected, Jamf Pro incorrectly uses the string "AnyEthernet" instead of the required "GlobalEthernet" in the payload, preventing computers from successfully joining corporate 802.1x wired networks. [PI139045] Fixed: Activation Lock status fails to display for eligible iOS devices in the Management > Activation Lock bypass category of a mobile device inventory record. [PI140234] Fixed: Static groups fail to display in the Management > Mobile Device Groups category of a mobile device inventory record. [PI140306] Fixed: Jamf P

With the new operating system going live today, and the great work of mSCP community, you can rely on uninterrupted compliance of your fleet from the very beginning. All you need to do is navigate into your existing benchmark and open the Benchmark rules where you review the changes coming with macOS 26. Then save the draft, deploy the benchmark - and it's done! New smart groups covering Tahoe will be created and objects will be scoped to them. This covers also Macbooks that get updated at any time after the release. Check the Rules report tab to see the compliance status!For any newly created benchmark, the support is just there.Let us know how the new OS version works for you! 

With Jamf Pro 11.20, support the next major Apple operating systems on the day they’re released, configure simplified setup for Platform Single Sign-on (Platform SSO), and enforce new restrictions!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Today we released Jamf Connect 3.3.0. This release includes the following: Changes and Improvements The release_notes.txt file is no longer available in the Jamf Connect DMG file or Jamf Connect Configuration. To view the Jamf Connect release notes, see Jamf Connect App for macOS Release History.Resolved Issue [PI139049] Fixed: The identity provider authentication prompt in the Jamf Connect login window requires users to scroll if the Login Window Size (LoginWindowSize) setting is configured. For configuration profiles using Okta-OIDC as their identity provider, Jamf recommends configuring the Login Window Size (LoginWindowSize) setting to Max for the best user experience. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

We continue in our efforts to streamline compliance benchmarks workflows and unify the reporting. Today, we are proud to announce two new highly demanded exports within the Compliance capability in Jamf Pro - something you have been asking for since the initial launch of Compliance in April.Auditing documentation: Holding the benchmark settings as configured by the admin, this set of documents is aimed to serve for compliance audits purposes. Those of you already using Jamf Compliance Editor or mSCP are familiar with these - now the adoc, pdf, html, and xlsx documents for each supported OS version are available right under Compliance Configuration tab in Jamf Pro. Compliance status: After enabling the computer-level compliance reporting in July, you can now export the overall compliance status, i.e. number of passing and failing computers for each rule in a benchmark, into csv file - very similar to the one produced by Compliance baselines in Jamf Protect. With this export, you can rep

Today we are releasing Jamf Pro 11.20; highlights include:Compatibility with Apple Operating SystemsCompatibility and new feature support are based on testing with the latest Apple beta releases of macOS Tahoe 26, iOS 26, iPadOS 26, tvOS 26, visionOS 26, and watchOS 26.   Simplified Setup for Platform Single Sign-OnJamf Pro can now support deployment of a Platform Single Sign-on (Platform SSO) application during the Setup Assistant with macOS 26* using the Simplified Setup for Platform Single Sign-on workflow in a computer PreStage enrollment. This workflow allows for Platform SSO to be enforced through the Setup Assistant during Automated Device enrollment, requiring registration with an identity provider (IdP) and the ability for macOS to create a user account based on the user’s information from the IdP.*Feature support is based on testing with the latest Apple beta releases. Full functionality requires compatible implementation from supported identity providers (Okta and Microsoft

Today we released Jamf Connect 3.0.0. This release includes the following changes and improvements: Upcoming Changes to Jamf ConnectJamf Connect 3.0.0 continues to include the following login window capabilities and direct support for Jamf Connect Configuration:-Desktop multifactor authentication-macOS account provisioning Deprecation of Jamf Connect Menu Bar App CapabilitiesThe Jamf Connect menu bar app is now deprecated and will no longer receive updates. All menu bar app capabilities from Jamf Connect 2.45 and earlier will be unaffected by this deprecation. Future updates to the Jamf Connect menu bar app will be limited to macOS compatibility and security updates.Note: For customers deploying Jamf Connect with Jamf School, Jamf recommends to continue using version 2.45.1 instead of updating to version 3.0.0. This will preserve the existing menu bar capabilities for Jamf Connect and not affect existing deployments.No immediate action or migration efforts are necessary; however, Jam

Today we are releasing a maintenance version of Jamf Pro; highlights include: Changes and ImprovementsJamf Pro 11.19.1 includes Tomcat 10.1.43.  Resolved Issues Jamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] [PI138128] Fixed: A known vulnerability in a third-party library (CVE-2025-48976). [PI138965] [PI138090] Fixed: A known vulnerability in a third-party library (CVE-2025-5878). Jamf Pro Server[PI135178] Fixed: In a computer configuration profile with a Restrictions payload configured to allow integration with external intelligence services, users may be prevented from enabling ChatGPT on computers in scope. This is due to the profile containing the key "allowedExternalIntelligenceWorkspaceIDs", even if the corresponding setting is not selected. [PI139029] Fixed: Modifications to smart groups are unable to be saved when the group is a dependency of a blueprint and impact alert notifications are enab

Update 06 August 2025: Standard Cloud upgrades are scheduled for the weekend of 15-16 August (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.19; highlights include:Impact Alert Notifications for Scopeable ObjectsThese notifications provide enhanced visibility and control when modifying group configurations. This feature helps prevent unintended large-scale changes by giving administrators insight into how their modifications will affect devices and existing group configurations across their organization.   Automatic Redistribution of ACME CertificatesYou can configure Jamf Pro to automatically redistribute ACME certificates to computers and mobile devices at a specified number of days before the certificates expire. To support this function, a $PROFILE_IDENTIFIER is automatically inserted into the Subject of the issued certificate as an organizational unit (OU). Note: Your ACME certificate authority template must also support t

With Jamf Pro 11.19, prevent potential scope errors with impact alert notifications, add descriptions to smart groups, and deploy Self Service+ automatically!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!Jamf Learning Hub - Release Notes Videos: https://learn.jamf.com/bundle/jamf-pro-release-notes-videos

Today we released Jamf Connect 3.2.0; this release includes the following changes and improvements:Identity Provider Support for RapidIdentityJamf's RapidIdentity is now available as an officially supported cloud identity provider (IdP) for the Jamf Connect login window and Jamf Connect Configuration. For more information about configuring RapidIdentity as your cloud IdP, see Integrating RapidIdentity's Identity Automation with Jamf Connect. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Hey Jamf Nation!Jamf Pro 11.20.0 features new keys and updates for Apple’s new Operating Systems coming this fall. There are also great updates to SSO features and functionality, updates to new APIs, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

We’ve been getting a lot of feedback that you need to see the compliance status of specific computers to take corrective actions - so here it finally is!Available now in all Jamf Pro 11.18 and newer instances, you are now able to click on each rule of your benchmark to get a list of computers in scope, with their compliance status against this rule, and a link to computer inventory for further investigations.Let us know what you think of this and how it helps you in your workflows. Availability of the data via APIs and exports is the next on our list, so stay tuned! 

Self Service+ is releasing 2.5.0. In this release you will find:Changes and ImprovementsNotification titles display in both the Notifications and Updates pages.Resolved Issues for Self Service+[PI136074] Fixed: URL scheme-triggered installations in Self Service+ may display a loading spinner and fail, while Jamf Pro incorrectly reports them as successful.Resolved Issues for Account Management[PI125130] Fixed: Configurations using the Microsoft Single Sign-on Extension fail to display the following error when users request admin privileges without being in an allowed group: "Unable to complete elevation. Contact your administrator for additional information."

Today we released Jamf Connect 3.1.0; this release addresses the following product issues:[PI131938] Fixed: For configurations using Microsoft Entra ID as their identity provider, the Jamf Connect login window displays an error message at the bottom of the screen when passkeys are an available authentication method. [PI134695] Fixed: The Jamf Connect login window displays a black screen after a user enters their password incorrectly and triggers the maxFailedAttempts setting. [PI135947] Fixed: When Short Name (OIDCShortName) is set to an email, the Jamf Connect login window creates a user account with the entire email domain instead of the prefix before the "@" symbol. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing a maintenance version of Jamf Pro; highlights include:Changes and ImprovementsJamf has upgraded the Jamf Support ticketing system. To access the new Support portal, log in to Jamf Account and click Contact Support in the top navigation. Jamf Pro no longer returns a "Version entered is unknown" error when attempting to execute an advanced computer search or save a smart computer group that uses 'unknown version' as a value for existing patch reporting criteria. Resolved IssuesJamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] Jamf Pro 11.18.1 includes Tomcat 10.1.42, effectively resolving a known security vulnerability in a third-party library (CVE-2025-48976). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the

Hey Jamf Nation!Jamf Pro 11.19.0 features Scoping Guardrails and Group Description Fields for Smart and Static Groups, along with Automatic Seat creation in DigiCert One TLM with SCEP Payloads, ACME Payload for macOS/iOS redistribution support, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Today we are releasing Jamf Pro 11.18; highlights include:Return to Service for Mobile Devices The Return to Service feature is available in the Jamf Pro interface, in addition to the Jamf Pro API. Return to Service is an option within the Wipe Device remote command that instructs a wiped device to automatically reconnect to the Wi-Fi network and re-enroll with Jamf Pro. Return to Service remembers the Wi-Fi settings and applies them automatically, which returns the device to a ready-to-use state for the next user while ensuring privacy and security among multiple users of the device.   Automatic Deployment of Self Service+ for macOS Note: The option to automatically deploy Self Service+ from Jamf Pro will be made available on a regional basis in environments with Jamf Pro 11.17.1 or later. When it becomes available in your region, you will see the option in Jamf Pro. Jamf Pro enables administrators to automatically deploy Self Service+ to enrolled computers by setting Self Service+ as

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues:  Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible.[PI124081] Fixed: A known vulnerability in a third-party library. (CVE-2024-47554)  Jamf Pro Server [PI135204] Fixed: After device re-enrollment, some configuration profiles may fail to install automatically even when properly scoped to the device. [PI135884] Fixed: Smart user groups that use excluding criteria (e.g., "is not", "not like", "does not match regex") to match roster data fail to match users with no associated Apple School Manager roster data due to a smart group calculation error. [PI135942] Fixed: An update to Log4j introduced a threading issue that could cause silent thread failures during server operations. [PI135944] Fixed: When "Last Reported IP Address" is selected as a display field for an advanced computer search, the disp

Today we are releasing Jamf Pro 11.17; highlights include: App Switcher for Jamf Platform ProductsAn app switcher has been added to streamline navigation between Jamf platform products and between multiple instances of a product. To use it, click the app switcher button in the top-left corner of the Jamf Pro interface. In the pop-up dialog, click a product to reveal its instances and shortcuts to top-level pages.Important: This capability requires logging in to Jamf Pro using OIDC-based single sign-on (SSO) configured in Jamf Account. If you do not have an OIDC identity provider (IdP), Jamf ID is available as an SSO option. For more information, see SSO with OIDC Through Jamf Account in the Jamf Pro Documentation. Support for DigiCert ONE Trust Lifecycle ManagerYou can use Jamf Pro's PKI Certificates settings to configure DigiCert ONE Trust Lifecycle Manager as a third-party CA, which can then be used to issue DigiCert certificates to managed computers and mobile devices. This featur

Update 08 May 2025: Standard Cloud upgrades are scheduled for the weekend of 16-17 May (details below). We appreciate your patience with the delayed schedule. Today we are releasing Jamf Pro 11.16; highlights include: Compliance BenchmarksBuilt on the macOS Security Compliance Project (mSCP) framework, compliance benchmarks enables you to automatically implement security standards across Mac devices. Compliance benchmarks supports industry-standard frameworks and automatically generates necessary management settings to enforce security controls. When enabled, compliance benchmarks create and maintain device security baselines through a combination of policies, configuration profiles, scripts, extension attributes, and smart groups, eliminating the need to manually configure individual security controls.Important: This capability requires logging in to Jamf Pro using Jamf Account (OIDC) single sign-on (SSO). This OIDC-based SSO integration allows you to log in to Jamf Pro with your J

Today we are releasing a new version of Jamf Pro; highlights include: New Restrictions and Skip Keys for Computers and Mobile Devices New settings include restrictions for Apple Intelligence reports, smart replies in Mail, summarization in Safari and Notes, and calling and messaging app modification. New Skip Keys in PreStage Enrollments include Software Update and Safety and Handling.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Note: There will be no mass upgrades of Standard Cloud environments for this release. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.  

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server [PI126319] Jamf Pro now pushes a new single sign-on extension (SSOe) profile to devices that have been either re-enrolled without being marked as unmanaged in Jamf Pro or scoped for device compliance for shared devices and had the SSOe profile removed. [PI131971] Performance is improved in environments where a large number of computers belonging to a site update their inventory simultaneously. [PI134534] A 404 error no longer occurs when navigating between a smart group that is scoped to a blueprint and the blueprints interface.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, inc

Today we are releasing Jamf Pro 11.14; highlights include: AD CS Certificate Deployment Using SCEPYou can now use the SCEP payload to deploy certificates from an Active Directory Certificate Services (AD CS) integration. Previously, only the Certificate (API) payload was available to issue AD CS certificates. The SCEP deployment method supports automatic certificate revocation based on scope change. You can also redistribute certificates that are approaching their expiration date by redistributing the configuration profile. App Installers Support for External URL DownloadsJamf App Installers supports software title installation packages that are downloaded via versioned URLs from a vendor's website. An alert is displayed on the Configuration settings tab for any software title that is downloaded via an external URL.Note: At this time, only newly added software titles that have a versioned URL available will be downloaded via external URLs.   For additional information on what's