Account-Driven Enrollments using Cloudflare and Jamf Pro

Simultaneously support both - Account-Driven User Enrollment (ADUE) & Account-Driven Device Enrollment (ADDE) : From Jamf doc : The service discovery JSON file for your Managed Apple Account domain can only specify either account-driven Device Enrollment or account-driven User Enrollment for devices to use. It cannot be specified for both. However Apple doc says : When attempting Account-Driven ** Enrollments, the device will send a request for the .well-known URL & append user-identifier & model-family Based on those 2 items, your web server may vend the same JSON document to any Apple device, or based on your defined logic, vend a different json for iPhone vs iPad vs....

December 30, 2024 · Pavan Raju

JPRO 10.46.0 - Memcached required for clustered and multi-context environments

(Previously, Memcached was only recommended and not required.) Starting with Jamf Pro 10.46.0, Memcached is required for clustered and multi-context environments. For non-clustered environments, ehcache is used by default. If your environment is clustered with multiple nodes and is currently using ehcache and not Memcached, you must install and configure Memcached for your environment to continue to function normally. No action is required if you have only a single Jamf Pro node and are not clustered....

November 22, 2023 · Pavan Raju

MacAdmins tips and tricks

Obfuscating a Password to Use in Scripts in Jamf Pro https://docs.illinoisstate.edu/endpoint/topics/guides/encrypting-a-password-to-use-in-scripts-in-jamf-pro De-signing Configuration Profiles https://macmule.com/2015/11/16/making-downloaded-jss-configuration-profiles-readable/ https://github.com/moofit/mobileconfig_automator Signing Configuration Profiles https://www.macblog.org/post/signing-configuration-profiles/ GUI tool : Hancock - This tool retrieves certificates saved in your computer’s Keychain and provides a GUI to easily sign your packages. https://www.jamf.com/jamf-nation/discussions/28311/using-jss-ca-to-sign-osx-configuration-profiles

June 19, 2021 · Pavan Raju

How to make root volume writeable again in Catalina?

At the time of writing this article, I was using : macOS Catalina 10.15.2 Build 19C57 Question : After the installation of Catalina, all the user created folders from root are moved into a separate folder and the root folder is made readonly, containing only system default folders. Is it possible to make the root folder writeable again? macOS Catalina runs in a read-only system volume, separate from other files on your Mac....

January 16, 2020 · Pavan Raju

MacAdmin Tools

Stuffs in my toolbox Packages - WhiteBox - A free package creation tool. The gold standard of making your own custom installer packages Suspicious Package - Another similar application for inspecting the contents of macOS packages Pacifist - Similar app to inspect / create packages Hancock - This tool retrieves certificates saved in your computer’s Keychain and provides a GUI to easily sign your packages. LaunchControl - To inspect launchd items...

December 31, 2019 · Pavan Raju