Ive been working with Jamf support to figure out why some of our mobile devices just stopped communicating with the JSS. They stopped checking in and all commands remain as pending.
Come to find out that the Device Identity Certificate on the device (under the MDM profile) expires 5 years from the date of first enrollment. The only way to fix them is to re-enroll them. This is apparently a known problem (PI-002187).
I was wondering how others are dealing with this issue.
Same here - super annoying and causing so much manual work for us.
"With that, the suggested workaround is to wipe and re-enroll but I know we're trying to avoid having to do that although this could end up being the last resort option."