What's Changed

Changes and Considerations for This Release

Review the following information before upgrading to prepare for changes that may impact your environment.

Mac Apps Compatibility Alert

Due to the upcoming requirement for Mac apps to support 64-bit, a compatibility alert will display on macOS 10.13.4 or later when opening Jamf Admin, Jamf Imaging, or Jamf Remote. Functionality is not currently impacted, and Jamf will address the 64-bit requirement in an upcoming release.

Incremental Upgrade Required for Jamf Pro 8.73 or Earlier

When upgrading from Jamf Pro 8.73 or earlier to Jamf Pro 10.3.0 or later, you must first perform an incremental upgrade to any version between Jamf Pro 9.0 and Jamf Pro 10.2.2. You cannot upgrade from Jamf Pro 8.73 or earlier directly to Jamf Pro 10.3.0 or later without first performing this incremental upgrade.

Redistributing SCEP-issued Certificates via Configuration Profiles

Jamf Pro now appends an identifier to certificates distributed to computers and mobile devices via a configuration profile with a SCEP payload configured to automatically redistribute the profile before the SCEP-issued certificate expires.

Important: To ensure the profile is redistributed before the SCEP-issued certificate expires, you must manually redistribute the profile to all devices that had the profile installed between Jamf Pro 10.0.0–10.2.x. If the appended identifier is not included in the Subject field of the SCEP payload, the profile is not redistributed before the certificate expires. Redistributing the profile to affected devices after upgrading to Jamf Pro 10.3.0 mitigates this issue.

Jamf Self Service for macOS

The following changes have been made to Jamf Self Service for macOS:

  • Self Service Application Name—You can customize the application name that displays in the Finder and in the Dock by modifying the Application Name text field in the Self Service Branding settings. By default, "Self Service " is displayed as the application name.

  • Self Service Toolbar—The Self Service toolbar has been updated to include the following tabs:

    • Home—Users can browse categories, install items, and use bookmarks from the Home tab. This tab was previously called "Library".

    • Activity—Users can browse software updates from the list of items available from the Activity tab. The Activity tab also displays a history of items installed via Self Service. This tab is a combination of the tabs that were previously called "Updates" and "History".

Language Update for Mobile Device Configuration Profiles

The Allow control using Remote app (supervised only) checkbox has been renamed to Allow pairing with Remote app (supervised only) on the tvOS tab in the Restrictions payload.

Issuing Symantec Certificates to Computers and Mobile Devices

The Issuing Symantec Certificates to Computers and Mobile Devices in Jamf Pro Knowledge Base article has been updated to reflect that Symantec certificates will be issued with "N/A" recorded for missing attributes if there is incomplete data in inventory information for a user in Jamf Pro.

Memcached Recommended for Clustered Environments

Memcached is recommended for this version of Jamf Pro, but not yet required. Memcached will be required for clustered environments in a future version of Jamf Pro.

To prepare for this change, see the following Knowledge Base article:
Memcached Installation and Configuration for Clustered Jamf Pro Environments

Change History

Depending on the version you are upgrading from, changes made to Jamf Pro since your last upgrade could impact your current environment setup or workflows.

The following table provides a historical list of key changes and additions to Jamf Pro, and the versions in which they were implemented.

with version...

Change or



Removed functionality

The following functionality has been removed:

  • Support for Android devices

  • Support for Apple's iPhone Configuration Utility (iPCU)


Removed integration with the Apache ActiveMQ Artemis message broker

Starting with Jamf Pro 10.1.0, the integration with the Apache ActiveMQ Artemis message broker was removed. In conjunction with this, the Enable Message Broker Debug Mode option on the Jamf Pro Server Logs page was removed.


Change to the FileVault 2 encryption status for macOS 10.9 or later

Due to a change in the fdsetup command, "Decrypted" is no longer a status for FileVault 2 on computers with macOS 10.9 or later. As computers submit inventory, the “Decrypted” status will automatically be updated to “Not Encrypted.”

If you have smart computer groups that use the “Decrypted” criteria, you will need to change that criteria to “Not Encrypted.”

Computers with macOS 10.7 and 10.8 will continue to list “Decrypted” as a status and that criteria can still be used for smart computer groups.


Implemented Jamf Pro compatibility levels by macOS version

Starting with Jamf Pro 10.0.0, if Self Service is configured to install automatically, computers in your environment will receive a specific version of the Self Service application depending on the computer's macOS version. Computers in your environment will also receive specific versions of some Jamf utilities based on the computer's macOS version.

For more information, see the following Knowledge Base article:
Jamf Pro Compatibility Reference for macOS


Removed functionality

The following functionality has been removed:

  • Java 1.7 compatibility

  • Localization for Jamf Pro in Simplified Chinese and Spanish

  • Localization for Jamf Self Service for macOS in Simplified Chinese

  • Self Service Plug-in Bundles

  • Peripherals

  • Managed Preferences

  • Provisioning Profiles


Change to FileVault personal recovery key settings for macOS 10.13 or later

On computers with macOS 10.13 or later, you must use the FileVault options in the Security & Privacy payload to enable and manage the FileVault personal recovery key. The FileVault Recovery Key Redirection payload is no longer supported on macOS 10.13 or later. However, you must continue to use the FileVault Recovery Key Redirection payload to manage the FileVault personal recovery key for computers with macOS 10.12 or earlier.


Apple has deprecated the ability to use installers to image computers with macOS 10.13

Due to changes in the way Jamf Admin manages macOS installers for macOS 10.12.4 or later, the InstallESD.dmg file is no longer automatically extracted from the macOS Installer.app file.
Workaround: For macOS 10.12.4, 10.12.5, and 10.12.6, manually extract the InstallESD.dmg from the Installer.app update file and upload it to Jamf Admin. On the General tab, select the Item is a DMG with a macOS Installer, or Adobe Updater/Installer for CS3 or CS4 checkbox, and click OK. The use of macOS installers for imaging is deprecated in macOS 10.13.


Additional privileges required for PreStage imaging and Autorun imaging workflows

A Jamf Pro user account with the "Jamf Imaging - PreStage Imaging and Autorun Imaging" privilege is now required for PreStage imaging and Autorun imaging workflows.

For more information on the permissions required for imaging computers, see the following Knowledge Base article:
Imaging Computer Permission Requirements


Apple has deprecated the ability to share APFS-formated volumes using AFP starting with macOS 10.13

Starting with macOS 10.13, Apple has deprecated the ability to share Apple File System (APFS)-formatted volumes using Apple Filing Protocol (AFP). Computers formatted with APFS can still mount AFP shares, but cannot share over AFP.

When preparing to upgrade your file share server to macOS 10.13, change the sharing protocol to SMB and update the protocol set for that distribution point in Jamf Pro.

If you need assistance or have questions, contact your Jamf account representative.

Copyright     Privacy     Terms of Use     Security
© copyright 2002-2018 Jamf. All rights reserved.