Skip to main content
Question

New JSS server with new SSL certificate. Will it keep communication with my existing enrolled devices ?

  • November 21, 2016
  • 2 replies
  • 32 views

Forum|alt.badge.img+13

Hello Nation,

Our existing Jamf Pro, running on Debian, has been running for almost 4 years. The self-signed SSL certificate was created using Keytool and expires in 2018.
I want to build a new Jamf Pro server (would replace our existing one) on CentOS, of course DNS and IP won't change. I will import our DB.
My question is the following:

We have 550 iPads and around 1500 MacOS laptops. By generating a new SSL self-signed certificate from the new Jamf Pro, will I lose communication with my devices ?

On my JSS-Test VM, If I generate a new self-signed certificate from Jamf Pro, I don't lose communication with my test iPad and test MBA.
On the other hand, If I manually create a self-signed certificate using Keytool (the way we build the current Prod Jamf Pro SSL certificate), it loses communication with my pre-enrolled test devices.
So as long as I don't use Keytool, it seems to be OK.

I reached out to our TAM, but he wasn't sure. I also talked to an engineer @jnuc, he told me it "should" be fine.
Any advice is appreciated. Thank you.

2 replies

Forum|alt.badge.img+14
  • Valued Contributor
  • November 21, 2016

In my experiences, as long as the URL is the same (or the SAN in the certificate).. you won't lose communication.


Forum|alt.badge.img+13
  • Author
  • Contributor
  • November 22, 2016

So you had success moving to a new JAMF Pro server while using a different SSL cert and still keeping communication with your devices ? Are you using self signed certs ?