FileVault - difference between escrow key and redirect keys????
In a config profile, what is the difference between Enable Escrow Personal Recovery KeyandFileVault Recovery Key Redirection View more
Forum Posts
CleanMyMac is now compatible with Jamf
Hey Jamf Nation, CleanMyMac X team here. We are a cleaning software for Mac that is notarized by Apple. Just wanted to notify you that CleanMyMac can be now installed and customized through Jamf Pro. Here’s how you can set up CleanMyMac: Visit our Bu... View more
JAMF and Java 11/12?
Hey all, So we are on JAMF 10.13 right now. I see the requirements for JAMF 10.15 are OpenJDK11 or Oracle Java 11. It seems the newest release is in the 12.x series. Can I use a 12.x Java or OpenJDK release? Currently running Windows Server 2012 R2 A... View more
JAMF setup for tvOS devices
Since we are deploying tvOS devices for different purpose it will be great th have the same app (or equivalent) also available for tvOS devices. I don't think it would be hard once you have the source code to adapt it to work in a tvOS (probably just... View more
Delayed ComputerName update?
Just curious, what process within Jamf deals with updating the inventory part for ComputerName? I thought it would be the Jamf Inventory tool but that does not seem to always update the computer name. Asking as right now I'm changing some of the comp... View more
Renaming Mac computer name
This is what I have now, just looking for guidance on making this work #!/bin/sh username=`ls -l /dev/console | cut -d " " -f 4` scutil --set ComputerName "$4""$username" scutil --set HostName "$4""$username".domain scutil --set LocalHostName "$4""$u... View more
Using Jamf as a SCEP Proxy for iPad with Cisco AnyConnect
We’re trying to use Jamf as a SCEP Proxy for subsequent certificate-based authentication using Cisco AnyConnect. We have the SCEP Proxy working. Devices are issued a certificate from our MS based certificate server (NDES). We can see evidence of this... View more
Fixing address in DEP screen
Can anyone tell me where to address in on the Remote Management screen when DEP enrolling a Mac? I can't find it, and neither Apple nor Jamf can tell me. Apple says the address is correct in their system, and it is correct in the DEP settings of the ... View more
Can't renew Apple push certificate and have to create a new one. How do we fix the enrollments?
Our Apple push certificate expired and we don't have access to the original apple id used to create it. We're going to have to generate a new cert which I assume will break our Jamf Pro enrollments. What needs to be done to fix the enrollments after ... View more
Activation Lock Status
system_profiler SPHardwareDataType | awk -F' ' '/Activation Lock/ {print $4}' View more
Jamf Infrastructure Manager (re-installation)
Been running Jamf Infrastructure Manager (JIM) for well over a year, without issues. I used this help discussion from the original install discussion here #27685 We recently had an unavoidable internal IP network change which affected our JIM ubuntu ... View more
Use the Recovery Key to unlock FileVault 2 over Target Disk Mode to recover data if you don't know the user's password.
For some time now corporate security has requested a better way to recover data if an employee quit or was let go and they didn't know the users password. They normally would have to go into recovery, follow additional steps so they can attempt to de... View more
secure token bypass 'Mojave'
what are you guys/gals doing with the 'secure token' popup ? I don't have FV2 enabled and AD users are getting the popup, so we have them select 'bypass'. i created a configuration profile, using the custom settings payload i added this .plist file (... View more
Jamf remote - Weird log results from Expect script
Hey All, Can someone help explain what's going on with a script we're working with? Preface: we're required to use deepfreeze with our Mac labs, and need to supply the DF license key to each machine. Deepfreeze CLI requires that you pass the deepfree... View more
Two MDM's one device
I already know this isn't really possible, but wondering if there is some kind of light touch option. I have a user who is interested in participating in our BYOD pilot but he has MaaS360 on his device already from another university he does some wor... View more
JAMF API Reporting
I have some pretty extensive reporting with SCCM, and I'd like to have something like it in Tableau in JAMF. I've got some Python scripts working to pull data out of the API, but I'm struggling with the combining data sets to get something meaningful... View more
LDAP connection- MFA Authentification not working
Hi Jamf,we have setup a LDAPS connection from our OKTA instance to Jamf. The reason for this is to have users to authenticate during first iOS enrollement.This works fine so far, with one minor blocker. Our Okta SSO uses MFA authentication. When the ... View more
Privacy Preferences Policy Control advice - Autodesk Mudbox
Hi, I have managed to create and deploy Autodesk Mudbox and Maya 2019 Ok. This thread (https://www.jamf.com/jamf-nation/discussions/10267/packaging-autodesk-maya) was a massive help. I don't know much about the software so had a bit of a play/test to... View more
Missing configuration profile EDU on mobile devices/iPads
Hey guys, is there any way to push the configuration profile EDU manually?Or exists a walk around to force a push of EDU profile?EDU profile is missing on almost the half of 400 iPads. Kind regards View more
NoMAD External Password Change
I'm trying to figure out if something is wrong with my configuration. If I change an accounts AD password while the user is logged in- they get prompted to update. If the user is logged off, they get the keychain error and can only create a new keych... View more
NoMAD Login?
I'm working on deploying NoMAD. When the app is opened, can't do anything until you've signed in. If we're bound to AD - shouldn't it pick up on the credentials, or is there another option I need to set? View more
Zero Touch Me
Hey Guys, Are any of you doing zero touch and I mean completely zero touch.What are you doing for Filevault encryption? Currently we have our IT team receive and setup the machine then deliver the machine and wait for user, we unlock the drive and se... View more
VirtualBox on Mojave
Hello Jamf Nation, I have a request to upgrade VirtualBox to the latest. It was working fine in High Sierra but once our cloud engineers upgraded to Mojave the application no longer works. Me and 2 other Mac technicians have tried to install and run ... View more
Trying to utilize the "Attachments" feature
We are a Jamf and Munki house. I was looking to have the client upload the Self Service Manifest to the JSS and store it in the "Attachments" tab in "Inventory". Not really sure if I can do this but was looking at the api's and it looks like "/fileup... View more
MimioStudio Privacy Configuration
Hey all,Any create a privacy configuration profile for Mimio Studio and the Mimio tablets yet? Gabe ShackneyPrinceton Public Schools View more
How do i enable remote login and remote management
How do i enable remote login and remote management on a mac 10.14.6 , machine is on a different site and i need to to enable it remotely .I have tried the script,ARD management, Do we have any other option ? I am able to just observe the machine, not... View more
Scripting question
So I have a question that I am sure someone smarter in scripting than me can answer. And maybe it has already been answered in another question. If it has, please direct me to that discussion. I am trying to write a script that requires a sudo comman... View more
MacOS apps - lots of issues
We’re using Jamf to deliver VPP licensed apps via self service. We have the following issues: When applications require updating, they don’t automatically update – I believe this is configured within JSS but seemingly has no effect. E.g. Microsoft Re... View more
Unable to Add AD Users to FV
Had anyone ever experienced this issue when an AD user tries to log into a freshly built machine and I go to Security & Privacy > Filevault > Padlock (Enter Admin Creds) > then click on enable users , you should get a window with the users that can b... View more
