Today we released Jamf Connect 2.32.0. This release includes the following changes and improvements: The Renew Kerberos Tickets (AutoRenewTickets) setting is now available during the Jamf Connect configuration process in Jamf Pro. The Kerberos Timeout (Timeout) setting is now available in Jamf Connect Configuration. See Kerberos Integration for more information.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team

Jamf Pro 11.2 introduces dark mode, a manual update option for App Installers, and Jamf Remote Assist session logs. Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.   Thank you for your continued support and feedback!

Hello Jamf Nation! Jamf Protect has released an update to the compliance feature. Compliance baseline now includes scoring metrics to assist you with achieving total compliance for your fleet and for individual computers. For additional information, see Compliance Baseline Summary in the Jamf Learning Hub. Thank you,The Jamf Protect team

Today we released Jamf Connect 2.31.0. This release includes the following changes and improvements: Removal of Support for macOS 11.x Jamf Connect no longer supports macOS 11.x. Computers with macOS 11.x or earlier will be unable to install Jamf Connect version 2.31.0 or later. Any automatic update workflows configured in your environment will no longer apply. Other Changes and Improvements Users can now enroll their mobile device with Duo Universal Prompt via Okta Identity Engine in the Jamf Connect login window web view. Users who authenticate locally with a Kerberos ticket will no longer experience logs that indicate the Kerberos authentication is incomplete prior to beginning network authentication. Resolved Issues [PI112919] The Tenant ID (OIDCTenant) and Custom Okta Authorization Server (OIDCAuthServer) settings now appear as intended when a Jamf Connect login window or menu bar configuration file with these settings configured is imported to Jamf Connect Configuration. [PI1

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.3 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589). Jamf Pro Server [PI115037] When computers or devices are enrolled in environments with enrollment customization and SSO configured, the Click here to proceed with enrollment button on the final enrollment pane was replaced with a progress bar that says, “Downloading MDM profile”. This change prevents failed enrollments. [PI115634] Computer configuration profiles with a Security and Privacy payload no longer lose configured settings, causing blank or null values in the os_x_configuration_profiles database table. As a result, Jamf Pro no longer sends repeated configuration profiles with unique identifiers to the computers in scope.   For additional information on what's included in this release, review the release notes

Hello Jamf Nation! We recently released tamper prevention for Jamf Protect. Tamper prevention safeguards the Jamf Protect application from being modified, disabled, or deleted without authorization.   Product Documentation For additional information, see Tamper Prevention in the Jamf Learning Hub. Thank you,The Jamf Protect team

Today we are releasing a maintenance version of Jamf Pro, this version is for our on-premise customers only. Jamf Pro 11.1.2 fixes the following product issues: Jamf Pro Server: Security Issues [PI115630] Updated the Jamf Pro installers to include Tomcat 8.5.96 to mitigate a known vulnerability (CVE-2023-46589).   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.  

Today we released Jamf Connect 2.30.0. This release includes the following changes and improvements: The Short Name (OIDCShortName) setting is now available for configurations with Okta Identity Engine as the identity provider. Jamf Connect can now connect to Kerberos for user authentication prior to the use of an identity provider.    To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.1.1 fixes the following product issues: Jamf Pro Server: Security Issues [PI115207] Updated a third-party library to resolve a known vulnerability (CVE-2023-34055). Jamf Pro Server [PI111014] [PI109336] Enrollment for computers no longer fails when user-initiated enrollment and PreStage enrollment settings are configured with identical management account credentials. [PI111120] The user account creation step of Setup Assistant for macOS is no longer incorrectly skipped when a PreStage enrollment is configured to skip the "Transfer Information" and "Location Services" steps. [PI111481] [PI103338] The user account creation step of Setup Assistant for macOS is no longer incorrectly skipped when a PreStage enrollment is configured to both create a management account and enable FileVault. [PI113195] The user account creation step of Setup Assistant for macOS is no longer incorrectly skipped on computers with macOS 14

Update 28 November 2023: Cloud upgrades are scheduled for the weekend of 8–9 December (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.1. Highlights include: Jamf Remote AssistYou can now use Jamf Remote Assist to securely initiate a remote session to manage computers and help users troubleshoot issues. Jamf Remote Assist is a screen-sharing feature for both on-premise and cloud-hosted environments. Using the Jamf Pro interface or the command line, Jamf Remote Assist sessions allow you to connect to an end user's computer even when the user is not on the internal network. macOS OnboardingYou can now use macOS Onboarding to easily configure and deploy content on computers for your end users. You can choose which policies, configuration profiles, and applications are automatically installed on end user computers when Self Service for macOS opens for the first time on a computer.   For additional information on what's included in this release, review

  Jamf Pro 11.1 introduces Jamf Remote Assist, macOS Onboarding, and a summary view for App Installers. Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements. Take the quiz below to check your knowledge.     Thank you for your continued support and feedback!

Today we released Jamf Connect 2.29.0. This release includes the following changes and improvements: The Jamf Connect menu bar app's user agent header string now includes the user's platform for Okta and Google. Additionally, the Jamf Connect login window and Jamf Connect Configuration also provide user agent strings that include the user's platform. [PI113140] The Open in Browser checkbox cannot be deselected while the Launch Browser (LaunchBrowser) setting is enabled. [PI113143] The Jamf Connect login window will no longer display a black screen when a new user logs in for the first time.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team

Today we are releasing Jamf Pro 10.49. Highlights of this release include: New API Roles and Clients SettingsThe new API roles and clients functionality in Jamf Pro provides a dedicated interface for controlling access to the Jamf Pro API and the Classic API. Local Administrator Password Solution EnhancementsYou can now use the local administrator password solution (LAPS) feature in the Jamf Pro API to manage local administrator account passwords on computers via the Jamf management framework. This method for implementing LAPS supplements the existing method for managing the local administrator account passwords via an MDM command.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox e

Today we are releasing Jamf Pro 11.0. Highlights of this release include: Jamf Pro Interface RedesignThe Jamf Pro interface has been redesigned to improve clarity and ease of use. The redesign includes new sidebar navigation, larger font sizes, greater contrast between font and background colors, and adjustments to the padding and alignment of various elements. These accessibility improvements make it easier to read text and scan information quickly when using Jamf Pro. Account-Driven Device EnrollmentYou can now use Account-Driven Device Enrollment to enroll mobile devices with Jamf Pro. Account-Driven Device Enrollment allows administrators to enroll institutionally owned mobile devices with Managed Apple IDs, simplifying the enrollment process. Note: Account-Driven Device Enrollment requires mobile devices with iOS 17 or later, or iPadOS 17 or later. StateRAMP StatusJamf has attained StateRAMP Ready status for Jamf Pro. For more information, see StateRAMP Compliance in the Trust C

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.0.1 fixes the following product issues: [PI111089] Simultaneous PATCH requests to the /v2/mobile-devices/{id} endpoint in the Jamf Pro API no longer cause configuration profiles and provisioning profiles to unexpectedly reinstall. [PI113020] Improved the memory footprint of the Set Wallpaper remote command. [PI113193] In environments integrated with Microsoft Intune and using Single Sign-On extension, Jamf Pro no longer incorrectly reports some managed computers as “Deactivated” or “non-compliant”. [PI114175] The Jamf Pro installers now include Apache Tomcat 8.5.95 to mitigate vulnerabilities identified in Apache Tomcat 8.5.93. [PI114369] Jamf Pro user accounts with “%”, “&”, or “+” characters in their password can now successfully log in again. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Ja

  It’s here! In Jamf Pro 11.0 the interface has been redesigned with a modern look and feel that improves clarity and ease of use. We’re excited to share many of these new features and enhancements that are part of this release.     We hope this resource continues to provide additional details to support your use of the features in this release. Thank you for your continued support and feedback!  

Starting in late August, a new version of JCDS will be released. To minimize potential disruption, you may need to make changes to your network configurations or third-party tools and plug-ins. For information about new domains, see the “Outbound Traffic from the Jamf Cloud Distribution Point“ section of Permitting Inbound/Outbound Traffic with Jamf Cloud. The new version of JCDS will include performance enhancements and stability improvements. Additional details and will be published in the Jamf Cloud Distribution Service (JCDS) Release Notes in the future.

Today we are releasing Jamf Pro 10.50. Highlights of this release include: Compatibility with macOS, iOS, iPadOS, and tvOS based on testing with the latest Apple beta releases Same Day support for new configuration profile keys SSOe improvements to macOS Device Compliance registrationThe JamfAAD on managed computers now has improved support for single sign-on extension (SSOe) in environments integrated with Microsoft Intune. This simplifies the registration process by reducing the number of prompts displayed to end users.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need a

Today we are releasing a maintenance version of Jamf Connect. Jamf Connect 2.28.1 addresses the following product issues: [CON-4909] The Jamf Connect menu bar app no longer repeatedly requests background account validation while changing networks. [PI113084] The Jamf Connect menu bar app's user agent string header now includes the user's platform. Conditional Access policies should be updated accordingly if they are set to conduct checks based on user agent strings. For example, Jamf%20Connect/5224 CFNetwork/1474.1 Darwin/23.0.0 will now appear as JamfConnect/5224 CFNetwork/macOS/1474.1 Darwin/23.0.0.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team

Today we are releasing Jamf Pro 10.48. Highlights of this release include: Conditional Access to Device Compliance MigrationA migration path from the legacy Microsoft Partner Device Management API (macOS Conditional Access) to the new Microsoft Partner Compliance Management API (macOS Device Compliance) is now available. Jamf Pro Dashboard RedesignThe Jamf Pro Dashboard is refreshed to improve the user experience and includes several accessibility improvements.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud

Today we released Jamf Connect 2.28.0. This release includes the following changes and improvements: The Secondary Access Group (OIDCSecondaryAccess) setting for the Jamf Connect login window is now available in the Jamf Connect Configuration app. The user experience for computer logins with a Jamf Connect one-time password is improved.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Connect team   Updated 04 October 2023: This post was revised to remove the reference to the login window redirecting users to the Local Login screen when computers are not connected to the internet.

Hello Jamf Nation! We recently released Jamf Protect 5.0.1. This release includes same-day support for macOS Sonoma 14 based on testing with the latest Apple beta releases. To ensure compatibility with macOS 14, all Jamf Protect customers need to update their target computers to the latest version of the Jamf Protect agent before updating their operating system to macOS 14.  If you do not have AutoUpdate enabled for Jamf Protect, or if you are a Jamf Protect Offline Mode customer, you will need to manually update the agent to the latest version and deploy the agent manually to the computers in your organization.   After successfully updating your computers to macOS 14, initiate a reboot for the computers in your organization.   Product Documentation  For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Thank you!The Jamf Protect team

Today we released Jamf Connect 2.27.0. This release includes the following changes and improvements:   UI Changes to Jamf Connect and Microsoft Azure Active Directory (AD) All mentions of Microsoft Azure AD will be changed to Microsoft Entra ID. Key-values in the configuration profile XML file will remain unchanged to prevent any configuration issues. Jamf Connect documentation will be updated to ensure all UI elements match where applicable. For more information, see Microsoft's New name for Azure Active Directory documentation.   Other Changes and Improvements The Jamf Connect menu bar app can now display the current user's name in addition to indicating whether they are a standard user or administrator. The OIDCSecondaryAccess key has been added to the Jamf Connect login window. This key specifies user roles or groups that contain users who are allowed to create additional users on computers after the first account is created. You can specify one role or group and more r

Hello Jamf Nation! We recently released Jamf Protect 5.0.0. This release includes the following changes and improvements: The Computers Overview dashboard and the macOS Version column on the Computers page now displays the Rapid Security Responses (RSR) version. The RSR version of macOS continues to be reported in the Computer Details, under OS and in Alerts. The Apple Provided Software is Current insight also continues to support RSR versions. The new query listBaselineRules has been added to the Jamf Protect public API. The query lists information for insights including their Center for Internet Security (CIS) benchmark ID. Previously, the Time Machine Volumes Are Encrypted insight reported noncompliant when a user did not have Time Machine enabled. Now the insight verifies that Time Machine is enabled prior to reporting compliance based on whether encryption is enabled or not. Product Documentation  For additional information on what's included in this release, review the

  Jamf Pro 10.50 introduces compatibility for macOS Sonoma, iOS 17, iPadOS 17, and tvOS 17. We’re excited to share many of these new features and enhancements ahead of Apple’s upcoming operating system releases. We hope this video resource continues to provide additional details to support your use of the features in this release. Thank you for your continued support and feedback!