We are seeing the same thing, which started yesterday for us. When we look at the certificates area under Settings > General > VPN & Managed Devices > Jamf School MDM Profile, we have 3 expired certs showing up (root.edu..., leader.edu..., and member.edu...) I created a Jamf School support ticket last night about the issue and added info this morning about these expired certs. We have ~5000 classes so I'm not about to go in and adjust the description for each class to get the certificates to be refreshed/regenerated.
Apple has confirmed that these certificates are under JAMF MDM control. The stand alone version of Apple Classroom sends a 1 year auth certificate is issued when the classe is created by the teacher. JAMF has NOT responded to this issue ALL my classes now show all the iPADS offline !!!
Ben in the Jamf School support group responded to my ticket that they "made a slight change on the backend of your Jamf School instance that should resolve that error message". After doing a device refresh against all of our devices, we checked with a few teachers and all of them are reporting that Apple Classroom is now working again. Hopefully you have opened a similar support ticket and can ask them to do the same thing for you that they did for us. (Since I'm not sure what they did, I'm guessing that if you reference our ticket number 107108, they can look to see what they did.)
Issue is still showing up intermittently at our school. Changing just one thing in any class, such as a description, makes it go away. (I had an iPad showing "you need a valid education profile" and after hitting refresh /save in the classes section after altering one description of JAmF classes showed up on said iPad almost instantaneously. But this can't be a viable solution.
We are not seeing the certificate issue - but students are randomly not connected. I tried the tip of changing the class name. A new EDU profile went out to the teachers iPad - but the students iPads did not receive an updated profile. Have an open ticket ...
We had an open ticket, JamF made changes, pushed a new certificate or some such and problem went away for a couple of days. Showed up again today. Removing and adding a student resolved the issue again but this can’t be a permanent solution. Our usual classroom fix for students not showing up was turning bluetooth and Wi-Fi off and on again, this doesn’t work anymore. Hard reset of students’ and or teachers device sometimes still helps but all in all the system is flaky.
We are experiencing this today as well. I contacted Jamf and they are working on a resolution on the backend. I did notice that to resolve it if the numbers are low (like one or two) I just quickly change the owner of the device to another student/teacher in that particular grade level (or however you have your devices grouped), and then back to the correct owner and it pushes out a new Education profile and that seems to resolve it. I am thinking this is tied to the update to 15. We had it blocked for students and teachers and just opened it up last week - now that our devices are running the update it seems to be causing the issue.
For anyone still having this issue I'll offer the workaround we implemented. Jamf support said to unassign and reassign the user, or enrol them in a new class so that their device will get a new EDU profile.
We created a smart group based on OS version 15 or higher, then created a new class manually in jamf and scoped it to the smart device group.
Now after a student (or teacher) updates their iPad, they are added to a new class and the device receives a new EDU profile. So far this appears to be working.
Huge problem at our Schools as well. We have 7000 classes and 13000 iPads. And it all started when iOS 15 was launched. Jamf told me to uncheck Apple Education support , wait a few hours and then Re-check. It did push out new EDU profiles but... Today it started again. I'm going to assume some of the students updated to iOS 15 today and now i might have to uncheck the ED support again. But its a pain and I hope they fix this.
This is interesting, I am having similar issues with apple classroom and iOS 14.5-8 we have not migrated to 15 yet - there seems to be a new area inside of settings that is getting disabled. Even though the classes are set up correctly in JAMF. The solution I've come up with takes at least 1 hr per class. I have to remove every connection - teacher iPad included. Then rebuild the class from scratch and attach the students by hand instead of using MUT. Its a PITA.
We've also had trouble with Apple Classroom lately. It started with the certificate messages described in the original post, but after several rounds with support and re-pushing the certificates, trying changing class names and properties, updating the app and OS etc. etc, we were stil left with teachers reporting the students appeared as disconnected. Hard reset and/or turning airplaine mode on/off and similar measures sometimes solved the issue (just temporarily, though).
Then I suddenly stumbled upon the WiFi setting "Private Address", and thought: "Why not try to turn that one off?".
And, wooha, suddenly I could see all the students in my test class as connected.
From Jamf School it is possible to disable "Private Address" for all by checking "Disable MAC Address Randomization" in the WiFi profile.
Just wanted to share this, if there are more of you out there like me, not being aware that this new privacy setting is incompatible with the use of Apple Classroom, even if it is not directly relevant to the certificate issue, and probably won't solve the issues if the Classroom app still shows the error message about the certificate.
We always had MacAdress randomization turned off in the prestage config because our Clearpass is programmed to send the iPad onto a public VLAN if active therefore no access to the classroom environment. This issue appeared with iOS update 15.0x I really think it is a JAMF server issue as 10 of my schools use Classroom 3.0 (Stand alone) with NO issues….
This is 100% an issue with Jamf. I submitted a help ticket to Jamf School and after waiting multiple days for a response this is what I got:
We sincerely apologize for the delayed response! The issue you are describing does appear to have impacted quite a few users and is something we are looking into.
For now the issue is that essentially there are some background certificate issues that can pop up that cause the error we see. Right now the best fix is one of these options:
- Unassign the device, and reassign it to its target user (recommended for single affected devices)
- Create a new class manually, assign all users that are affected by this issue to this class (recommended for multiple devices affected)
We had a meeting with our apple rep earlier this week. He advised updating our ipads to 15 - I had been holding off due to the issues i've seen in this thread. He let me know that Apple was aware of the issue and had been actively working to resolve the issue. He reassured me several times that updating would fix the problem. Rather than jumping and updating everyone, I've updated 1 of our classrooms and asked the teacher to try. I will post back with my results.
I understand that. We are 1:1 as well. I make arrangements with the teacher and push the update with Jamf. I have found lately though, that I either have to touch the iPads myself or have a student do so. So I can't that it will work by just pushing the command. If the teachers are that intent (I think it's great!) on using it enlist their help?