Hello Jamf Nation! We have two important notifications for Jamf Protect users who may be affected by future deprecations and changes. Support for macOS 11 will be removed in a future Jamf Protect release. Jamf recommends updating to macOS 12.x or later to ensure continued support. The existing telemetry feature is expected to be incompatible with the next major macOS version. Jamf Protect is developing a new version of telemetry that is compatible with current and future versions of macOS. The improved version of telemetry provides more detailed configuration options, better refinement and visibility of telemetry data, and improved resource utilization.The existing telemetry feature will continue to be available to allow customers time to migrate to the new version. Prior to releasing the new telemetry feature, Jamf will provide more detailed documentation of telemetry events and dat

Hello Jamf Nation! Advanced threat controls has been added to Jamf Protect. Advanced threat controls intervene when unsafe or malicious activity considered high-risk by Threat Labs is detected. Detected activity is blocked and reported to administrators for further investigation. For additional information, see Threat Prevention in the Jamf Learning Hub. Thank you,The Jamf Protect team

Today we are releasing a maintenance version of Jamf Pro; this release includes the following changes and improvements:   Support Added for Deploying Apps Using the Jamf Certificate SDK You can now deploy apps that use the Jamf Certificate SDK to personally owned mobile devices, including iOS, iPadOS, and visionOS devices. Previously only institutionally owned iOS devices were supported.   Important Notice Cloud Service Connection Manual Initialization—Starting in August 2024, if you have Jamf Pro 11.3.0 or earlier, you must upgrade to Jamf Pro 11.4.0 or later to initialize a Cloud Services connection manually. After upgrading to Jamf Pro 11.4.0 or later, you can enable a Cloud Services connection in Jamf Pro. For more information, see

Today we are releasing Jamf Pro 11.5. Highlights include: Enabling LAPS in the Jamf Pro InterfaceFunctionality for the local administrator password solution (LAPS) is available in the Jamf Pro interface. This enhancement allows you to define settings for the managed local administrator accounts configured in user-initiated enrollment settings and PreStage enrollments that were previously available in the Jamf Pro API only. Packages Page RedesignThe Packages settings page has been redesigned with new functionality and an updated layout that matches the design of Jamf Pro 11. In addition to various accessibility improvements including larger font sizes and reduced clutter, the update features a floating progress bar that displays the upload progress of a package and download functionality for previously uploaded packages directly from the Jamf Cloud Distribution Service

Today we released Jamf Connect 2.35.0. This release includes the following changes and improvements:  The new URL Scheme and Command Line Elevation (URLCommandLineElevation) key prevents unsanctioned privilege elevation via URL schemes and the command line interface. Elevation from the command line interface is only allowed when URL Scheme and Command Line Elevation is set to true. The ZIP file from the Collect logs button now includes the com.jamf.connect.actions and com.jamf.connect.shares domains.   Resolved Issues [PI116170] The Jamf Connect login window now informs users their account is locked after multiple failures to enter the correct password on computers without FileVault encryption. [PI117370] Configurations of the Jamf Connect menu bar app with Kerberos no lon

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.4.2 fixes the following product issue:  Jamf Pro Server [PI117958] A database table issue that could cause server instability and an HTTP 503 error has been resolved.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments,

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.4.1 fixes the following product issue:  Jamf Pro Server [PI117633] A database table issue that could cause server instability has been resolved.    For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated

Today we released Jamf Connect 2.34.0. This release includes the following changes and improvements:  Updates to the UI of the privilege elevation feature in the Jamf Connect Configuration app include consistent spacing between various elements, and related settings are grouped together visually. The Disable RSR Watcher (DisableRSRWatcher) key is no longer available in Jamf Connect or the Jamf Connect Configuration app.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the

Today we are releasing Jamf Pro 11.4. Highlights include: Compatibility with visionOSManagement capabilities are available in Jamf Pro for Apple Vision Pro devices with visionOS 1.1 or later based on testing with the latest Apple beta releases. Restrictions Setting for European Union Digital Markets ActYou can prevent users from installing alternative marketplace apps and marketplace-hosted apps on supervised devices with iOS 17.4 or later. Global End User Experience Settings for App InstallersYou can use the new App Installers settings page to customize the end user experience for all App Installers deployments in your Jamf Pro instance. You no longer need to individually configure end user experience settings for each App Installers deployment. However, you can still customize the settings for each app separately.  

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.3.2 fixes the following product issue: Jamf Pro Server [PI116625] Jamf Pro no longer sends duplicate RemoveProfile commands to computers in the scope of a configuration profile; the duplicate commands caused HTTP 503 errors.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upg

Hello Jamf Nation! The Unified Logging feature has been added to Jamf Protect Offline Deployment Mode. Unified Logging allows you to use the same predicate-based filter criteria used with the Mac log command to collect relevant log entries from computers and send them to a security information and event management (SIEM) solution or to a third-party storage solution. For additional information, see Creating a Unified Log Filter in the Jamf Learning Hub. For Unified Log examples, see the Jamf Protect open source GitHub repository. Thank you,The Jamf Protect team

Today we released Jamf Connect 2.33.0. This release includes the following changes and improvements: Privilege Elevation using Jamf Connect The Jamf Connect menu bar app allows standard users to initiate a temporary promotion to a local administrator. Upon activation, a timer will appear in the user's menu bar for the duration of their promotion. When the timer ends, the user will be reverted to a standard user. This feature can be added to your Jamf Connect configuration with the Temporary User Promotion (TemporaryUserPromotion) setting manually or via the Jamf Connect Configuration app. For more information, see Privilege Elevation for Local Accounts.   Other Changes and Improvements

Today we are releasing Jamf Pro 11.3. Highlights include: Account-Driven Device Enrollment for ComputersYou can use account-driven Device Enrollment to enroll computers with Jamf Pro. Account-driven Device Enrollment allows you to enroll institutionally owned computers with Managed Apple IDs, simplifying the enrollment process. Account-driven Device Enrollment requires computers with macOS 14 or later. Viewing LAPS Passwords in the Jamf Pro InterfaceYou can view managed local administrator accounts and passwords in the Jamf Pro interface after enabling Jamf's managed local administrator password solution (LAPS) in the Jamf Pro API. Viewing a LAPS password automatically triggers password rotation according to your LAPS settings. All LAPS events, including password viewing and rotation, are logged.   For additional information on what's included

Jamf Pro 11.3 makes LAPS easier to use via the Jamf Pro interface, introduces support for Account-Driven Device Enrollment on computers, and brings improvements to the Jamf App Catalog experience for administrators and users alike! Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements. Thank you for your continued support and feedback!  

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.2.1 fixes the following product issue: Jamf Pro Server: Security Issues [PI116156] Resolved a broken access control issue for some enrollment workflows.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will b

Update 5 February 2024: Cloud upgrades are scheduled for the weekend of 16–17 February (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.2. Highlights include:  Dark Mode SupportThe Jamf Pro interface now has a dark display theme option. This alternative color scheme provides the same high contrast between text and background colors for maximum readability, but inverts the light and dark colors in a way that some may find more comfortable to view. Manual Update Workflow for App InstallersJamf Pro now includes a manual update workflow for App Installers. This change gives you more control over the App Installers deployments in your environment by allowing you to test a version on a small group of computers before applying it to all computers. Jamf Remote Assist Session Logs

Today we released Jamf Connect 2.32.0. This release includes the following changes and improvements: The Renew Kerberos Tickets (AutoRenewTickets) setting is now available during the Jamf Connect configuration process in Jamf Pro. The Kerberos Timeout (Timeout) setting is now available in Jamf Connect Configuration. See Kerberos Integration for more information.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation

Jamf Pro 11.2 introduces dark mode, a manual update option for App Installers, and Jamf Remote Assist session logs. Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.   Thank you for your continued support and feedback!

Hello Jamf Nation! Jamf Protect has released an update to the compliance feature. Compliance baseline now includes scoring metrics to assist you with achieving total compliance for your fleet and for individual computers. For additional information, see Compliance Baseline Summary in the Jamf Learning Hub. Thank you,The Jamf Protect team

Today we released Jamf Connect 2.31.0. This release includes the following changes and improvements: Removal of Support for macOS 11.x Jamf Connect no longer supports macOS 11.x. Computers with macOS 11.x or earlier will be unable to install Jamf Connect version 2.31.0 or later. Any automatic update workflows configured in your environment will no longer apply. Other Changes and Improvements Users can now enroll their mobile device with Duo Universal Prompt via Okta Identity Engine in the Jamf Connect login window web view. Users who authenticate locally with a Kerberos ticket will no longer experience logs that indicate the Kerberos authentication is incomplete prior to beginning network authentication. Resolved Issues [PI112919] The Tenant ID (OIDCTenant) and

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.3 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589). Jamf Pro Server [PI115037] When computers or devices are enrolled in environments with enrollment customization and SSO configured, the Click here to proceed with enrollment button on the final enrollment pane was replaced with a progress bar that says, “Downloading MDM profile”. This change prevents failed enrollments. [PI115634] Computer configuration profiles with a Security and Privacy payload no longer lose configured settings, causing blank or null values in the os_x_configuration_profiles database table

Hello Jamf Nation! We recently released tamper prevention for Jamf Protect. Tamper prevention safeguards the Jamf Protect application from being modified, disabled, or deleted without authorization.   Product Documentation For additional information, see Tamper Prevention in the Jamf Learning Hub. Thank you,The Jamf Protect team

Today we are releasing a maintenance version of Jamf Pro, this version is for our on-premise customers only. Jamf Pro 11.1.2 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589).   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.  

Today we released Jamf Connect 2.30.0. This release includes the following changes and improvements: The Short Name (OIDCShortName) setting is now available for configurations with Okta Identity Engine as the identity provider. Jamf Connect can now connect to Kerberos for user authentication prior to the use of an identity provider.    To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Lear

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.1 fixes the following product issues: Jamf Pro Server: Security Issues [PI115207] Updated a third-party library to resolve a known vulnerability (CVE-2023-34055). Jamf Pro Server [PI111014] [PI109336] Enrollment for computers no longer fails when user-initiated enrollment and PreStage enrollment settings are configured with identical management account credentials. [PI111120] The user account creation step of Setup Assistant for macOS is no longer incorrectly skipped when a PreStage enrollment is configured to skip the "Transfer Information" and "Location Services" steps. [PI111481] [PI103338] The user account creation step of Setup Assistant for macOS is no longer incorrectly skipped when a PreStage enrollment is configured to both create a management account