JAMF Pro 11.3 GSX no renew for certificate.

[dugnl]

Our GSX connection certificate is about to expire.  We got a new one from Apple's GSX services.   The JAMF pro documentation says there is a renew button.  It's totally missing from our 11.3 cloud instance.  I've opened a ticket with JAMF but heard nothing back.

I went ahead and removed the old certificate and uploaded the new one.  The only way I could to get the certificate in there.   I also loaded up a new API token.    Now, I'm getting unauthorized.  GSX has came back and said it's a Jamf UI problem as the cert and account look good.

Wondering if anyone else has noticed this?

Renewing the Apple Certificate

You can use Jamf Pro to upload a renewed Apple certificate without removing the existing certificate so the connection with GSX is not lost. A notification is displayed 31 days prior to the expiration date of the Apple certificate.

1. In Jamf Pro, click Settings in the sidebar.
2. In the Global section, click GSX connection.
3. Click Edit .
4. Click Renew.
5. Follow the onscreen instructions to upload a renewed Apple certificate.

[aparten]

@dugnl Ever solve this? Getting similar results lately...

[dugnl]

JAMF Support opened product issue PI117280.   I don't know if that PI has been published to everyone.  I also don't know if this PI is fixed in JAMF 11.4.   

Our GSX connection was working with 11.2 and broke with 11.3.    JAMF support seemed to think it was user error or a configuration issue.  I spent a full week trying to convince them that it wasn't difficult to not see a big "Renew" button.

They must've had some other reports during this time, because JAMF support did come back with the PI number.  I don't think they had one until about the time I brought the issue up.     This did have to get elevated past their initial support techs.

I haven't heard anything back and with JAMF Pro cloud coming April 12th, we will see what happens then.  

In the meantime, our GSX connection is completely broken.

I suggest opening a ticket with support and see if it's the same thing.   Again, you might have to elevate it a bit higher.

Doug

There last response to me:

Hi Doug,

I think that we are running into an open product issue - PI117280 - GSX failing due to duplicate calls, that is causing the renew button to fail to appear based on error messages in your server logs"

[aparten]

Thanks for the response! I contacted GSX support earlier and they told me it's a "known issue with Jamf" so I created a support request with Jamf. Hopefully it will be resolved soon! I notice there's no mention of that PI in the 11.4.0 release notes, so I'm guessing it'll be addressed in a later release.

-Alex

[dugnl]

With 11.4.1, I still never got a renew button and by the time 11.4 was implemented my expiring cert had expired.   I uploaded the new cert.  It tests the connection okay.  But, now I've got a new issue.  When clicking on purchasing on any device and running the lookup, I get a jamfcloud.com says GSX lookup was not successful.  Not sure what the next step is.... I'm fairly confident I did the certificate correctly.

[jtrant]

Same issue here, I have a feeling it's related to the PI linked above.

[llitz123]

Opened a ticket and the tech didn't really know much.  I pointed him to this thread and he guessed I had the same issue?  He said just keep an eye out for a fix after a JSS update - read the release notes?  Anyone have a fix for this as our days to renew are dwindling quickly.

Thanks.

[dugnl]

my time for renewing ran out.   I did have a new certificate.   The new certificate uploads and connection tests OK.    But, when retrieving GSX data, it says GSX lookup is unsuccessful.   Ticket with Apple GSX and they say it's the same JAMF issue.

I opened the ticket again with JAMF.  The same higher tech worked the case.  He put logging on our server.  Rob at JAMF support stated. "ok, the problem is still tied to the original product issue PI117280)."    The logs show duplicate/repeated API queries against GSX from JAMF.   The issue isn't resolved.   My GSX hasn't connected for over a month now.  Rob talks about trying to get additional traction to resolve the issue.    But right now there is no fix.   So, we are all just supposed to keep an eye out for any JSS updates and read the release notes for them.

[dugnl]

Just a note that I'm on the 11.4.1 release........ 11.3 wouldn't test the GSX connection successfully at all.  returned unauthorized.  11.4.1 at least the cert loaded and connection was okay.  But I still can't lookup information.

[llitz123]

Thanks for the thorough response.  Our server for reference as well: Version11.4.1-t1712591696

[eric_wood]

I'm glad I eventually found this thread.

Version 11.4.1-t1712591696 here and experiencing the same issue.

I had just renewed my PEM files for my GSX Sold-To this very morning, after having let it lapse for a few months, and thought I had done something wrong in the process.

[aparten]

I will assume they're still working on the issue as 11.4.2 does not address this PI either. Hopefully it can be resolved soon! 🤞

[eric_wood]

I can concur that 11.4.2 does not resolve this issue for my instance. No change in GSX lookup behaviour here.

[ChkYerSelf]

Same issue here, great if Jamf took some accountability