jamf pro prestage enrollment feature "Minimum required macOS version" not working

[jnilsson]

Hello,

Apologies if this is not the right place to ask questions like this. I tried searching before posting, but did not find anyone else already asking about this recently.

I have set up a prestage enrollment with the option "Minimum required macOS version" set to "Latest version based on computer eligibility". I thought that this would update a computer to the latest version of macOS that is compatible with the device, but it seems to just install the latest version of macOS that came with the device. In my test case, I am using a MacBook Air (M1, 2020). When I get to the desktop after the Setup Assistant finishes, the first thing I get is a notification about a macOS update available, which is not what I expected.

Here's what I did:
1) the MacBook Air had Sequoia installed before, and I used the Jamf management command "Wipe Computer" from the web interface
2) the computer reboots, does its thing, and brings up the Setup Assistant
3) the prestage enrollment seems to be working, since it skips all the sections of the assistant that I told it to skip

4) when I get to the desktop, I see that macOS Monterey 12.7.4 is installed, which seems like it is probably the original version

Is this expected? Or should it have been able to update to Sequoia? If so, are there any settings I should enable to make it work?

I did find someone say that a "bootstraptoken" would be needed and I used this command to check for one:

sudo profiles status -type bootstraptoken

 I got the response "YES" for both supported and escrowed.

[AJPinto · Accepted solution]

This is not so much a Jamf feature as it is an Apple MDM feature, 12.7.4 is too old and does not support this feature so the device ignores the command. This feature requires macOS 14+, unfortunately this is one of situations where it would make our lives easier if Apple would backdate some features but doesn’t. 

https://support.apple.com/guide/deployment/installing-and-enforcing-software-updates-depd30715cbb/we....

Requiring a minimum version during enrollment

Starting in iOS 17, iPadOS 17, and macOS 14, MDM solutions can enforce a minimum operating system version during Automated Device Enrollment. If the device doesn’t meet the minimum version expected by the mobile device management (MDM) solution, the user is guided through an update before they can complete Setup Assistant. The same process happens automatically when used with Auto Advance. This helps ensure that devices owned by an organization are on the necessary operating system version before being put into production.

---

https://support.apple.com/en-ng/guide/deployment/dep73069dd57/web#:~:text=Enforcing%20a%20minimum%20....

---

Enforcing a minimum version of iOS, iPadOS, and macOS

MDM solutions can enforce a minimum operating system version on enrolling devices when using Automated Device Enrollment. If the device doesn’t meet the minimum version expected by MDM, the user is guided through a software update or upgrade before they can continue with Setup Assistant. This ensures that devices owned by an organization are on the necessary version required before being put into production.

---

---

[Tribruin]

Just to add, while Apple specifies the minimum of macOS 14, for Jamf the feature requires a minimum of macOS 14.4 to be installed on the computer. 

[jamf-42]

ive seen 14.4.1 skipped.. sure there was a thread somewhere.. I believe it was saying 14.5.x onward and your OK..