Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: [PI124276] In Jamf Pro instances hosted in Microsoft Azure, a port number is no longer incorrectly appended to the end of the IP Address field in a device's inventory record, which previously prevented any changes to the General pane from being saved. [PI125557] The device compliance for shared devices workflow to configure iOS apps no longer causes issues for apps other than Jamf and Microsoft apps. Note: Devices in scope of device compliance for shared devices will have a Single Sign-On Extensions payload deployed to them. If devices in the Applicable Group had a Single Sign-On Extensions payload deployed to them previously, device compliance will not be enforced on those devices until the old Single Sign-On Extensions payload is removed.   For additional infor

Today we are releasing Jamf Pro 11.13; highlights include: Admin SSOAdministrators can use Admin SSO as a single sign-on (SSO) method to log in to Jamf Pro. Admin SSO, configured in Jamf Account, allows you to use a centralized configuration for each Jamf product instead of separate single sign-on integrations. Admin SSO allows you to log into Jamf Account using either a cloud-based identity provider (IdP) or your Jamf ID. Self Service+Self Service+ is an enhancement to the Self Service end user application for macOS that allows users to access content and updates that have been preconfigured in Jamf Pro. Using Self Service+, end users can now view security status via the home screen's Security dashboard if Jamf Protect is installed on the device.   For additional information on what's included in this release, review the

Today we released Jamf Connect 2.43.0; this release includes minor bug fixes and improvements.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server [PI122416] When creating or modifying a configuration profile with a VPN payload that uses "Password" for the User Authentication type, Jamf Pro now correctly creates the profile with a valid AuthenticationMethod key. [PI123933] Jamf Pro no longer fails to display the scope for newly created deployable objects and saves scoping changes for existing objects as expected. [PI124225] Upgrading Jamf Pro no longer unexpectedly alters the required privileges for the Jamf Parent and Jamf Teacher apps to function.   For additional information on what's included in this release, review the r

Update 19 December 2024: Standard cloud upgrades are scheduled for the weekend of 20–21 December (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.12; highlights include: New Restrictions for Computers and Mobile DevicesNew restrictions include support for bypass screen capture alert and the ability to restrict Apple Intelligence features. Computer Extension Attributes Page RedesignThe redesign features improvements to search, filtering, and display of computer extension attributes.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. See the latest

Today we released Jamf Connect 2.42.0. This release includes the following changes and improvements: Removal of Support for macOS 12.xJamf Connect no longer supports macOS 12.x. Computers with macOS 12.x or earlier will be unable to install Jamf Connect version 2.42.0 or later. Any automatic update workflows configured in your environment will no longer apply. Other Changes and ImprovementsThe Jamf Connect login window and menu bar now include Brazilian Portuguese as a supported language.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this rel

Today we are releasing a maintenance version of Jamf Pro. Consider upgrading to Jamf Pro 11.11.2 if you leverage AirPlay and are using devices with iOS 18, iPadOS 18, or tvOS 18 in your environment. Potentially impacted workflows include patient bedside environments, where Jamf Pro’s Global AirPlay Permissions settings allow for 1:1 mapping of bedside iPads to only see that room’s Apple TV devices as available targets; and interactive classroom settings, where teachers use Airplay to wirelessly display iPad content on an Apple TV. This release addresses the following product issues: Jamf Pro Server [PI120758] The AirPlay payload for computers now includes the DeviceName key to identify Apple TV devices with tvOS 18 or later as allowed AirPlay destinations, and it no longer requires a DeviceID key to be set. [PI121960] [PI122414] If you have AirPlay destinations mapped in S

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issue: Jamf Pro Server [PI122414] Functionality for distributing in-house apps and books that were uploaded to a cloud distribution point prior to Jamf Pro 11.11.0 has been restored.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, inc

Update 11 November 2024: Standard cloud upgrades are scheduled for the weekend of 15–16 November (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.11. Highlights include: Managed Device Attestation Using MDM RequestsJamf Pro now supports Apple's DeviceInformation attestation, a Managed Device Attestation method that verifies the computers and mobile devices in your fleet are legitimate Apple devices. Computer and Mobile Device Inventory Reporting EnhancementsNew inventory information for Battery Health and FileVault 2 enablement are gathered by declarative status reports. Support for New Mobile Device RestrictionsUsing mobile device configuration profiles, you can now restrict the use of RCS messaging, block the transfer of an eSIM to a different device, and preserve the eSIM on an erased devi

Today we released Jamf Connect 2.41.0. This release includes the following changes and improvements: Upcoming Support Removal for macOS 12.xSupport for macOS 12.x will be removed from Jamf Connect in a future release. Jamf recommends updating to macOS 13.x or later to ensure continued support. Other Changes and ImprovementsYou can now configure offline multifactor authentication (MFA) without integrating Jamf Connect with a cloud identity provider (IdP). This allows users to have an accessible MFA solution, increasing device security without the immediate need for an IdP integration.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issue: Jamf Pro Server [PI121695] Functionality for viewing computer inventory information in the General pane of the Jamf Pro interface and retrieving inventory information for certain endpoints in the Jamf Pro API, including App Installers endpoints, has been restored.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible. [PI119913] Updated a third-party library to resolve a known vulnerability (CVE-2023-45857). [PI121204] Resolved a "Credentials Management Error" for some SMTP server configurations. Jamf Pro Server [PI121197] Jamf Pro upgrades no longer fail due to issues during the font migration process if a database table contains null values.   For additional information on what's included in this release, review the

Today we are releasing Jamf Pro 11.10. Highlights include: New Keys for System Extension PayloadJamf Pro includes two new system extension types for computers with macOS 15 or later. In macOS 15, end users can see and disable previously installed managed system extensions (e.g., endpoint security tools) through System Settings or Finder. You can use these new settings (Non-removable system extensions and Non-removable system extensions from UI) to prevent end users from removing these system extensions.If you use Jamf Protect, which runs as a system extension, Jamf strongly recommends configuring this new MDM setting to restrict users from disabling Jamf Protect.Note: This feature is also included in Jamf Pro 11.9.1 or later. App Installers Workflow ImprovementWhen using App Installers to install an app via Self Serv

Today we released Jamf Connect 2.40.0. This release includes the following changes and improvements:  The Verify User Promotion via FIDO2 (VerifyUserPromotionFIDO2) setting allows administrators to have users authenticate through Safari prior to a privilege elevation session. Authenticating within a browser adds support for WebAuthn authenticators including passkeys and FIDO2 keys. This setting is currently supported with the following identity providers: Microsoft Entra ID Okta Identity Engine Okta OpenID Connect (OIDC) PingFederate Note: Requiring WebAuthn authentication for privilege elevation may require changes to your identity provider's authentication policies. After enabling the setting, the Jamf

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issue: Jamf Pro Server [PI120491] [PI120535] Setting the wallpaper on multiple mobile devices using the Automated Management Set Wallpaper command no longer results in errors during enrollment or blank inventory data in device records.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrad

Today we are releasing a maintenance version of Jamf Pro; this release includes the following changes and improvements: New Keys for System Extension Payload Jamf Pro includes two new system extension types for computers with macOS 15* or later. In macOS 15*, end users can see and disable previously installed managed system extensions (e.g., endpoint security tools) through System Settings or Finder. You can use these new settings (Non-removable system extensions and Non-removable system extensions from UI) to prevent end users from removing these system extensions. If you use Jamf Protect, which runs as a system extension, Jamf strongly recommends configuring this new MDM setting to restrict users from disabling Jamf Protect. *Feature support is based on testing with the latest Apple beta releases.  

In macOS 15, Apple introduced the ability for users to disable system extensions using System Settings or Finder. On 12 September, we released an update that provided Jamf Protect administrators with a configuration profile to download and deploy. This profile prevents users from removing Jamf Protect on macOS 15. We also include instructions for configuring a system extension in Jamf Pro and deploying it using a smart computer group. Note: These steps should only be taken on computers that have already upgraded to macOS 15. For more information, see the Jamf Protect release history.

Today we released Jamf Connect 2.39.0. This release includes the following changes and improvements: The Jamf Connect menu bar app now displays the temporary privilege elevation duration in the format "HH:MM:SS" to improve usability when elevating users for more than 60 minutes.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing Jamf Protect Agent version 6.1.1; highlights include: Data endpoints for Kafka and syslog are now available in Jamf Protect and Jamf Protect Offline Deployment Mode in the action configurations. The protectctl info command has updated flags related to telemetry and diagnostic output destination. For environments with high compliance requirements, Jamf Pro now provides a configuration schema that can be used to configure Jamf Protect Offline Deployment Mode without using the interface.   See the Jamf Protect release history or the Jamf Protect O

Today we are releasing Jamf Pro 11.9. Highlights include: Compatibility with Apple Operating SystemsCompatibility and new feature support are based on testing with the latest Apple beta releases of macOS Sequoia 15, iOS 18, iPadOS 18, tvOS 18, visionOS 2, and watchOS 11. Minimum OS EnforcementWhen you enroll computers and mobile devices with Jamf Pro via Automated Device Enrollment, you can use a PreStage enrollment to specify a minimum operating system version the device must have before continuing enrollment. When a device does not have the operating system you specified in Jamf Pro, the user is prompted to update the device before Setup Assistant continues. This feature enhances your organization's security by ensuring devices have the required operating system version the moment they are enrolled. Automated Device Enrollment f

Today we released Jamf Connect 2.38.0. This release includes the following changes and improvements:  Suppress Google Consent Prompts in the Jamf Connect Login WindowIf you use Google Cloud as an identity provider (IdP) and unexpected consent prompts display during each user login with Jamf Connect, see the Suppressing Google Consent Prompts in the Jamf Connect Login Window troubleshooting instructions. This configuration change resolves PI118708. Notice of Upcoming Support Removal for Jamf UnlockThe Jamf Unlock mobile app will no longer be supported when macOS 15 Sequoia releases. Devices using Jamf Unlock can be unpaired via the Jamf Connect menu bar under Paired devices.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issue: Jamf Pro Server[PI119651] Creating or editing computer configuration profiles with payloads that require you to click Configure no longer causes the Jamf Pro user interface to spin indefinitely if debug mode is enabled in Settings > Information > Jamf Pro server logs.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products sec

Today we are releasing Jamf Pro 11.7. Highlights include: Managed Software Updates Now Generally AvailableThis release of Jamf Pro includes the following enhancements: Improved interface with higher visibility of update statuses when viewing software update information in an individual device record Added an event store view which was previously only available via the Jamf Pro API Improved stability and functionality, including resolutions to issues that caused software update plans to not complete Automated Certificate Management Environment (ACME) payload supportThe ACME Certificate payload is an alternative for SCEP and is used to obtain certificates from a certificate authority for computers and mobile devices enrolled with Jamf Pro.   For additional information on what's included in this release, rev

Today we released Jamf Connect 2.37.0. This release includes the following changes and improvements: Identity provider (IdP) related features and background activity are now disabled by default when Jamf Connect is not linked to an IdP. PingFederate is now a supported IdP when making role-based privilege elevations. The login window web view now expands to better fit certain IdP logins on larger displays.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the

Hello Jamf Nation, In Jamf Protect, alerts pertaining to threat prevention have been updated to include additional information about the malware detected, including available reference articles from Jamf Threat Labs to enable further investigation.  For additional information, review the release notes via the Jamf Learning Hub. Thank you,The Jamf Protect team