https://blog.themacguy.in/tags/jamf-pro/ Recent content in JAMF PRO on TheMacGuy.in https://blog.themacguy.in/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://blog.themacguy.in/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- gohugo.io Thu, 25 Dec 2025 10:17:03 +0000 https://blog.themacguy.in/posts/2025/2025-12-dec/01-exploring-terraform/ Thu, 25 Dec 2025 10:17:03 +0000 https://blog.themacguy.in/posts/2025/2025-12-dec/01-exploring-terraform/ Setting up Tart: brew install cirruslabs/cli/tart brew tap hashicorp/tap brew install hashicorp/tap/packer git clone https://github.com/motionbug/macad.uk2025.git cd packer-templates # Create a Variables File (my-config.pkrvars.hcl) <!-- ------------- sample file ------------------- # ------------------------- # Packer Variables File # ------------------------- # This file contains variable values for the apple-tart-tahoe.pkr.hcl template # Usage: packer build -var-file="my-config.pkrvars.hcl" apple-tart-tahoe.pkr.hcl # https://motionbug.com/updates-to-the-packer-template-now-with-macos-tahoe/ # VM Configuration vm_name = "26.2_vanilla" ipsw_url = "/Users/adele/Documents/UniversalMac_26.2_25C56_Restore_2025-12-12.ipsw" # Account Configuration account_userName = "admin" account_password = "admin" # MDM Enrollment Configuration enrollment_type = "link" # Options: "profile" or "link" jamf_url = "https://example. https://blog.themacguy.in/posts/2024/2024-12-dec/01-well-known_file_hosting_cloudflare/ Mon, 30 Dec 2024 10:17:03 +0000 https://blog.themacguy.in/posts/2024/2024-12-dec/01-well-known_file_hosting_cloudflare/ Simultaneously support both - Account-Driven User Enrollment (ADUE) & Account-Driven Device Enrollment (ADDE) : From Jamf doc : The service discovery JSON file for your Managed Apple Account domain can only specify either account-driven Device Enrollment or account-driven User Enrollment for devices to use. It cannot be specified for both. However Apple doc says : When attempting Account-Driven ** Enrollments, the device will send a request for the .well-known URL & append user-identifier & model-family Based on those 2 items, your web server may vend the same JSON document to any Apple device, or based on your defined logic, vend a different json for iPhone vs iPad vs. https://blog.themacguy.in/posts/2023/2023-11-nov/01-jpro-10.46-memcached/ Wed, 22 Nov 2023 13:29:55 +0530 https://blog.themacguy.in/posts/2023/2023-11-nov/01-jpro-10.46-memcached/ (Previously, Memcached was only recommended and not required.) Starting with Jamf Pro 10.46.0, Memcached is required for clustered and multi-context environments. For non-clustered environments, ehcache is used by default. If your environment is clustered with multiple nodes and is currently using ehcache and not Memcached, you must install and configure Memcached for your environment to continue to function normally. No action is required if you have only a single Jamf Pro node and are not clustered. https://blog.themacguy.in/posts/2023/2023-05-may/00-jpro-parameters/ Thu, 18 May 2023 08:09:14 +0530 https://blog.themacguy.in/posts/2023/2023-05-may/00-jpro-parameters/ https://macnotes.wordpress.com/2022/01/14/device-specific-parameters-for-jamf-pro-script-policies/ Custom Schema : Preference Domain : com.my.script { "title": "My Script Settings", "description": "Settings for my script", "properties": { "jamf_mac_username": { "title": "Username", "description": "The Jamf device owner", "property_order": 10, "type": "string" }, "jamf_pro_id": { "title": "JSSID", "description": "Jamf Pro ID", "property_order": 10, "type": "string" }, "jamf_mac_fullname": { "title": "FULLNAME", "description": "Full Name", "property_order": 10, "type": "string" } } } Sample script : #!/bin/bash # Ref : https://macnotes.wordpress.com/2022/01/14/device-specific-parameters-for-jamf-pro-script-policies/ preference_path='/Library/Managed Preferences/com. https://blog.themacguy.in/posts/2022/2022-09-sept/2022-09-sept-01-jamf-binary-self-heal-in-2022/ Thu, 15 Sep 2022 19:53:07 +0530 https://blog.themacguy.in/posts/2022/2022-09-sept/2022-09-sept-01-jamf-binary-self-heal-in-2022/ Desc Text. https://blog.themacguy.in/posts/2021/2021-06-june/2021-06-20-01-apache-tomcat-cert-update/ Sun, 20 Jun 2021 22:30:16 +0530 https://blog.themacguy.in/posts/2021/2021-06-june/2021-06-20-01-apache-tomcat-cert-update/ Functionality to issue the Tomcat SSL/TLS certificate from Jamf Pro’s built-in certificate authority — Jamf Pro’s functionality to issue the Tomcat SSL/TLS certificate from the JSS built-in certificate authority (CA) will be discontinued in a future release of Jamf Pro. The release version for this change has not been determined. Before this change occurs, it is recommended that all on-premise Jamf Pro instances leveraging this functionality switch to a publicly trusted third-party CA to issue the Tomcat SSL/TLS certificate. https://blog.themacguy.in/posts/2021/2021-06-june/2021-06-19-01-macadmins-tips-and-tricks/ Sat, 19 Jun 2021 22:30:16 +0530 https://blog.themacguy.in/posts/2021/2021-06-june/2021-06-19-01-macadmins-tips-and-tricks/ Obfuscating a Password to Use in Scripts in Jamf Pro https://docs.illinoisstate.edu/endpoint/topics/guides/encrypting-a-password-to-use-in-scripts-in-jamf-pro De-signing Configuration Profiles https://macmule.com/2015/11/16/making-downloaded-jss-configuration-profiles-readable/ https://github.com/moofit/mobileconfig_automator Signing Configuration Profiles https://www.macblog.org/post/signing-configuration-profiles/ GUI tool : Hancock - This tool retrieves certificates saved in your computer’s Keychain and provides a GUI to easily sign your packages. https://www.jamf.com/jamf-nation/discussions/28311/using-jss-ca-to-sign-osx-configuration-profiles https://blog.themacguy.in/posts/2019/2019-12-december/2019-12-31-01-macadmin-tools/ Tue, 31 Dec 2019 22:30:16 +0530 https://blog.themacguy.in/posts/2019/2019-12-december/2019-12-31-01-macadmin-tools/ Stuffs in my toolbox Packages - WhiteBox - A free package creation tool. The gold standard of making your own custom installer packages Suspicious Package - Another similar application for inspecting the contents of macOS packages Pacifist - Similar app to inspect / create packages Hancock - This tool retrieves certificates saved in your computer’s Keychain and provides a GUI to easily sign your packages. LaunchControl - To inspect launchd items https://blog.themacguy.in/posts/2019/2019-10-october/2019-10-25-01-setting-up-jss-on-aws/ Fri, 25 Oct 2019 23:24:59 +0530 https://blog.themacguy.in/posts/2019/2019-10-october/2019-10-25-01-setting-up-jss-on-aws/ At the time of writing this article, I was using : Jamf Pro 10.16 macOS Catalina 10.15.0 Build 19A602 What are we setting up… Jamf on Docker Containers This will run locally on the machine https://bryson3gps.wordpress.com/2019/11/25/so-you-want-to-containerize-jamf-pro/{:target="_blank"} Jamf on AWS Makes use of above docker. Google domain needed to add CNAME. https://bryson3gps.wordpress.com/2019/11/25/so-you-want-to-run-serverless-jamf-pro/{:target="_blank"} 3a. Azure LDAP and Azure SSO https://hcsonline.com/images/PDFs/Jamf_Microsoft_Azure_Integration.pdf{:target="_blank"} https://hcsonline.com/images/Identity_Management_Azure_Jamf.pdf{:target="_blank"} Used some of these mappings : https://travellingtechguy.eu/integrate-azure-ldap-in-jamf-pro/{:target="_blank"} 3b. JumpCloud as LDAP provider and SSO.