Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 10.46.1 fixes the following product issues: [PI111508] Resolved a broken access control issue within an authentication implementation (CVE-2023-31224). [PI111680] Jamf Pro users who u... View more
Hello Jamf Nation! We're excited to announce as of Jamf Pro 10.47.0 Beta 2 in addition to the Release Notes we'll be using Jamf Engage Guides to call out new features and enhancements directly in your Jamf Pro Beta Instance! You'll find links to Beta... View more
Customer Education is back again with our next Jamf Pro Release Notes video! Join us for an overview of some of the new features and enhancements that are available in Jamf Pro 10.46. We hope this resource continues to provide additional details to s... View more
As a follow-up to a recent post regarding some additional IP address that have been included in the Outbound traffic from Jamf Cloud, below is a list of the Outbound IP Address that have been added. For a complete list, please see the “Permitting Inb... View more
Currently we use the dual institutional + individual combination, but since all users are local users, the issue persists that sometimes changing the password does not change their filevault password. We are trying to figure out if using an instituti... View more
Good morning, I am looking for some documentation, or know how on using an Institutional Key to decrypt a MacOS Catalina Drive. I have followed the instructions left on this post: https://www.jamf.com/jamf-nation/discussions/27222/filevault-2-institu... View more
Good morning, I am working on documenting & setting up FileVault in our organization using a Configuration Profile (versus the Disk Encryption Policy). It looks like everything has deployed correctly, and the Individual Keys are working correctly. Ho... View more
I am looking for proper workflows to enable FileVault with Big Sur. Are there any new changes in 10.26 regarding FileVault configuration (current process seems very archaic) I currently use the FileVault process form the Jamf Admin's Guide and that w... View more
Does anyone else get this when trying to enable FileVault 2? We do use a config profile that redirects the key for all OS levels above 10.13. View more
Hello Jamf Nation, we are currently looking into move to the cloud rather sooner than later. Have any of you recently made the transfer, if so how was it? One of my questions regarding the move to the cloud, is that we are still binding our Macs, wha... View more
We've been experiencing an increasing number of users reporting that when they power on/reboot their machines, FV does not take their passwords and eventually locks them out, requiring them to reset their PW with the recovery key... or in nearly ever... View more
I am somewhat of a filevault virgin, but am getting more and more pressure to enable on my Macs. I have done some testing on my development network, but am finding it a bit tricky with AD bound systems and using AD roaming profile logins. View more
We will be using a script to prompt the users to enter their creds in order to reissue the FileVault key. I read in a post that if the system is apfs then you should also run diskutil apfs updatePreboot / and was wondering if that is actually necessa... View more
Anyone out there try converting an institutional key to an individual key with a policy? Our old Mac management tool had to use an institutional key for encrypting FileVault. I'd like to convert all of our existing devices to an individual key. Any i... View more
We're on the road to migrating our managed encryption agent from McAfee ePO (ePolicy Orchestrator) to a Jamf-managed FileVault policy. Oh, thank Zeus! Before we do, the McAfee agent won't go without a fight. There's a command that McAfee gives us tha... View more
I have a Mac that's already been encrypted with FileVault (Moving it from AirWatch as the MDM to Jamf), and the Disk Encryption page for this specific computer is blank. The computer's been encrypted according to System Preferences, but Jamf for some... View more
So now that booting into Recovery Mode no longer takes you to the utilities screen without the Personal Recovery Key, is Institutional Recovery now effectively dead? We had a very limited use case for it before so no big loss, but if it's no longer f... View more
Hi All, hoping for some help here. Looking to frankenstein together a script to add our admin account to FV2 as an enabled user. I've got a script that is currently working under the following conditions: Running locally in terminalRunning manually f... View more
Hi,I am hoping that someone here can assist and/or advise. Some months back we had a demo of JamfPro.It seemed like it would do everything we wanted in the demo environment, so progressed ahead to purchase. We get the live environment, do the JumpSta... View more
I'm posting this in case others encountered this issue with bootstrap tokens on macOS 10.15. Particularly, we were running Jamf Pro 10.23.0 but were still seeing our devices show that tokens were not supported on the server. Checking the status:sudo ... View more
Hi, We have a requirement to detect the connection of External Storage device to the Mac, check if it is encrypted, If not, prompt to encrypt with password.Any idea on how this can be done? View more
Hello, everyone, I hope someone can help me with this issue I'm having some issue on Catalina that the Padlock is not locking after I start the FileVault and or create a new admin account if I click on it to lock it nothing happens View more
Scenario:We are not using DEP/ABM at this time.Macs are brought in, ran through setup assistant manually where a single local admin account is created; our "build account".Techs login as this user, install AD certs and enroll via QuickAdd.They then r... View more
注意：・テスト環境で動作確認をして下さい。・10.13、10.14には対応しておりません。・環境に合わせて内容を変更して下さい。・ぜひ意見交換をして下さい。 ステップ１）ジャムフ・プロ → 設定 → コンピュータ管理 → ディスク暗号化の構成。・表示名：（例）macOS 10.11 ~ 10.12・リカバリキーのタイプ：Indivisual・FileVault 2のユーザを有効にする：Management Account注）Current or Next Userでも構いませんがManageme... View more
注意：・テスト環境で動作確認をして下さい。・旧式のmacOSでは正しく機能しない場合が有ります。・環境に合わせて内容を変更して下さい。・ぜひ意見交換をして下さい。 概要：ステップ１：構成プロファイルを使用してFileVaultキーがジャムフ・プロに預託（エスクロー）する。ステップ２：スマートグループを使用してリカバリーキーがない、リカバリーキーが壊れているコンピュータを割り出す。ステップ３：FV2リカバリキーの再配布を実施するスクリプトを設定するステップ４：ステップ２で割り出されたコンピュータに... View more
I've seen three different values for FileVault recovery key: valid unknown invalid Valid and unknown are obvious, but how does a key become invalid? View more
I am wanting to improve our end user security within our school district on our macOS devices. Since I have taken over the Jamf/macOS/iOS process I have noticed that we don't have any real security profiles set up. What are some of your preferred pro... View more
Greetings, I have been having issues enabling filevault on my jamf devices. I have a configuration profile configured as the following (pictures Jamf 1 and Jamf 2 attached) I also have a policy that enforces the filevault enablement "at next login" a... View more
We have a local account on all of our Mac systems. It's a full Admin, FV2 enabled account that is used primarily by support. At this point the PW for this account is widely known and we would like to change that PW and put it on a 90 day rotation sch... View more
In our environment all devices are required to be encrypted. When a student graduates, the laptop they were issued is given to them. We run a cleanup script that removes our software, admin accounts, removes the JAMF framework and then reboots for ho... View more
Hello, I am trying to implement LAPS for Mac into my organization. We got to the point where we can successfully create the LAPS user, let's call it 'admin', it will randomize the password once a week, and report that to Jamf as an extension attribut... View more
Oh yea, you read that right: https://support.logi.com/hc/en-001/articles/360037899233 Worth posting here for awareness, in case you're asked to package/deploy. View more
Hey , I've been using JAMF NOW for a several months now at my company for Macbooks. I'm trying to write a script to change the recovery and get the recovery key in Jamf. I'm trying to write the script like a way that the user only has to login in wit... View more
During a recent internal audit, we were asked to provide a list of Jamf Pro administrators who have rights to view a computer's FileVault Recovery Key. If you have more than a few Jamf Pro admins, this task can prove tedious. Hats off to @dacschumach... View more