What's New

InnoDB Requirement for MySQL

Starting with Jamf Pro 10.10.0, the InnoDB storage engine for the MySQL database is required. Prior to upgrading to Jamf Pro 10.10.0, all MySQL database tables must have been converted from the MyISAM storage engine to the InnoDB storage engine. Jamf Pro 10.10.0 will not start if any MySQL database tables use the MyISAM storage engine.

If you are upgrading from Jamf Pro 10.9.0 or earlier, the Jamf Pro 10.10.0 installers now include a prompt to update the MySQL database storage engine to InnoDB.

You can use the Jamf Pro Server Tools command-line interface (CLI) to convert your database to InnoDB. For instructions, see the Converting the MySQL Database Storage Engine from MyISAM to InnoDB Using the Jamf Pro Server Tools Command-Line Interface Knowledge Base article.

Note: The size of your database may increase after you convert your database to InnoDB.

For questions or assistance on converting your database to InnoDB, contact Jamf Support.

For more information about InnoDB, see the following webpage:
https://dev.mysql.com/doc/refman/8.0/en/innodb-introduction.html

MySQL 8.0 Supported and Recommended

Starting with Jamf Pro 10.10.0, MySQL 8.0 is supported and recommended. However, to use MySQL 8.0 with Jamf Pro, you must manually configure the MySQL authentication plug-in to use legacy password encryption. For instructions, see the Configuring MySQL 8.0 for Jamf Pro Knowledge Base article.

For information about upgrading to MySQL 8.0, see the following webpage:
https://dev.mysql.com/doc/refman/8.0/en/upgrading.html

Inventory Preload Enhancements

The following enhancements have been made to the Inventory Preload global management setting:

  • Computer Data Accepted in CSV File—You can now include computer inventory data in the CSV file that is uploaded to Inventory Preload. Prior to Jamf Pro 10.10.0, Inventory Preload was limited to mobile devices. You can use Inventory Preload to update computer usernames, buildings, departments, device purchasing information, extension attributes, and more. You can also create or update computer users.

  • New Columns in CSV Template—The following columns have been added to the CSV template:

    • Device Type (This field is required and only accepts two valid values: "Computer" or "Mobile Device".)

    • Bar code 1 (computers only)

    • Bar code 2 (computers only)

    • Asset tag

    • Vendor

To access this feature in Jamf Pro, navigate to Settings > Global Management > Inventory Preload.

For more information, see the Inventory Preload section in the Jamf Pro Administrator's Guide.

Computer Management Capabilities

Configuration Profile Enhancements

  • Jamf Pro now allows you to save a maximum cache size greater than 2.14 GB in the Content Caching payload of a computer configuration profile.

  • You can now allow all apps to access the certificate in the keychain in the Certificate payload of a computer configuration profile.

PreStage Enrollment Enhancements

  • You can now add configuration profiles to a computer PreStage enrollment. This allows you to distribute the profile to computers during enrollment with Jamf Pro. The profile is installed on computers before the user completes the Setup Assistant.

  • You can now install a package on computers with macOS 10.13 or earlier during enrollment using a PreStage enrollment.
    Note: You must have a cloud distribution point configured as the master distribution point in Jamf Pro.
    For more information, see the
    Cloud Distribution Point section in the Jamf Pro Administrator's Guide.

Email Inventory Reports for Advanced Computer Searches

You can now email inventory reports for advanced computer searches. Reports can be emailed immediately or according to a schedule. You can configure multiple email reports to be sent to different recipients on different schedules.

To access this feature in Jamf Pro, navigate to Computers > Search Inventory for a list of saved advanced computer searches, or create a new advanced search. Then, click the Reports tab.

Note: This enhancement replaces the export method for downloading saved advanced computer search reports.

For more information, see the Computer Reports section in the Jamf Pro Administrator's Guide.

Enhancements for macOS Intune Integration Logs

  • You can now manually trigger an inventory update to be sent from Jamf Pro to Microsoft Intune directly from the macOS Intune Integration Logs category.
    To trigger the update, navigate to a computer's history, click the macOS Intune Integration Logs category, and then click Send Update.
    Note: The "Send Update" functionality is still available in macOS Intune Integration settings and is independent of the standard communication schedule.

  • You can now view the status of inventory updates sent from Jamf Pro to Microsoft Intune.
    To view the status, navigate to a computer's history, click the macOS Intune Integration Logs category, and then navigate to the "Intune Status" column.

  • You no longer need to configure the Computer Inventory Collection settings to collect local user account information to view logs for the macOS Intune Integration.

Mobile Device Management Capabilities

Jamf Pro now has a privilege to allow a Jamf Pro user account to assign users to mobile devices.
Note: When upgrading to Jamf Pro 10.10.0 or later, this privilege is turned on by default.

Jamf Pro API Changes and Enhancements

The Jamf Pro API beta is open for user testing. The base URL for the Jamf Pro API is /uapi. To access the Jamf Pro API documentation, append "/uapi/doc" to your Jamf Pro URL. For example: https://jss.mycompany.com:8443/uapi/doc

Note: As the Jamf Pro API continues to be developed, changes will be made in future releases that may impact or break functionality. We strongly encourage that you test existing workflows using the Jamf Pro API before upgrading your production environment.

  • The following endpoints have been added:

    • GET /device-enrollment

    • GET /device-enrollment/{id}

    • PUT /device-enrollment/{id}

    • DELETE /device-enrollment/{id}

    • PUT /action/device-enrollment/{id}/upload-token

    • POST /action/device-enrollment/upload-token

    • GET /v1/jamf-pro-server-url

    • PUT /v1/jamf-pro-server-url

    • GET /v1/jamf-pro-server-url/history

    • POST /v1/jamf-pro-server-url/history

  • The POST /inventory-preload endpoint now requires the Device Type field in addition to the Serial Number field.

  • The/settings/action/device-enrollment/{id}/disown endpoint has been moved to /action/device-enrollment/{id}/disown.

  • The /action/inventory-preload/validate-csv endpoint has been moved to /inventory-preload/validate-csv.

  • Inventory preload endpoints are no longer limited to mobile devices.

  • The GET /startup-status endpoint now defines enumerations of each stepCode.

Extended Validation for LDAP Servers Connecting over SSL

Starting with Jamf Pro 10.10.0, an extended security validation occurs whenever configuring or modifying an LDAP server that uses SSL. The validation occurs when saving the manual configuration in the LDAP Server settings or when clicking the Next button in the LDAP Server Setup Assistant.

If you are using LDAP over SSL (LDAPS) and your configuration does not meet the extended security requirements, you will receive a notification in Jamf Pro prompting you to update your existing LDAP server configuration.

For common LDAP over SSL issues and resolutions, view the Troubleshooting LDAP over SSL connections in Jamf Pro Knowledge Base article.

Jamf Pro Server Tools CLI 2.2.7

The following enhancements were made in Jamf Pro Server Tools Command-Line Interface (CLI) 2.2.7, which is included in the Jamf Pro installers:

  • The encryption mechanism used to secure the configuration file has changed. Full encryption is now an optional feature, and an encryption key prompt is no longer required to read or write the configuration file. For more information, see the Using the Jamf Pro Server Tools Command-Line Interface Knowledge Base article.

  • MySQL 8.0 is now supported.

  • InnoDB conversion no longer prompts for MySQL settings by default.

  • System information is no longer printed during InnoDB conversion.

Upgrade Information

If you are upgrading from CLI 1.2.3 or earlier, you will need to reconfigure the database password and any scheduled tasks:

  • To reconfigure the database password, execute the following command:

    jamf-pro config set --database-password

  • To view existing scheduled tasks, execute the following command:

    jamf-pro database schedules list

Other Changes and Enhancements

  • Self Service for macOS now supports Dark Mode on computers with macOS 10.14.x or later.

  • Renamed smart computer group and advanced computer search criteria from "Passcode History" to "Password History".

  • The following changes have been made to the Roster category in user inventory information for Apple School Manager integrations:

    • The Roster category is only displayed for a user if information has been populated from Apple School Manager.

    • Roster category fields are populated only with information imported from Apple School Manager, and are no longer editable via the user interface or the Jamf Pro API.

    • Roster information that was previously entered manually is wiped.

  • Jamf Pro now automatically updates Mac App Store apps and App Store apps when computers and mobile devices check in with Jamf Pro if there is an app update available.

  • Jamf Pro now includes a link to the AppConfig Generator for help generating the preferences (PLIST file) for managed app configuration. For more information about AppConfig, see the following website:
    https://www.appconfig.org

  • Improved the security of certificate communication by adding parameter verification to the Certificate SDK API.

Further Considerations

  • Privileges associated with new features in Jamf Pro are disabled by default.

  • It is recommended that you clear your browser's cache after upgrading Jamf Pro to ensure that the Jamf Pro interface displays correctly.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2019 Jamf. All rights reserved.