MDM Profile requiring verification after upgrade to HS

[bdwiklund]

Hi folks,

We have recently been seeing this issue with our machines upgrading from Sierra to HS 10.13.5+. It seems to only be an issue for our machines that are not enrolled via DEP (we still have quite a few devices too old for DEP). After upgrading the device wants manual verification to trust the MDM profile. Furthermore using ARD is prohibited as per a notice that comes up. Anyone else seeing this behaviour?

[bdwiklund]

[bdwiklund]

[koalatee]

Honestly kind of amazed this is the first you've noticed it :)

Here's some resources
jamf
jamf2
apple kb

If you're not already on jamf 10.3+, you should upgrade as user-initiated enrollment will install the MDM profile as approved for 10.13 machines.