Functionality Changes and Other Considerations

Depending on the version you are upgrading from, changes made to the Casper Suite since your last upgrade could impact your current environment setup or workflows.

The following table explains key changes and additions to the Casper Suite, the versions in which they were implemented, and where to get more information.

Starting
with...

Change or
Consideration

Description

v9.101.0

Change to FileVault personal recovery key settings for macOS 10.13 or later

On computers with macOS 10.13 or later, you must use the FileVault options in the Security & Privacy payload to enable and manage the FileVault personal recovery key. The FileVault Recovery Key Redirection payload is no longer supported on macOS 10.13 or later. However, you must continue to use the FileVault Recovery Key Redirection payload to manage the FileVault personal recovery key for computers with macOS 10.12 or earlier.

v9.101.0

Additional privileges required for PreStage imaging and Autorun imaging workflows

A JSS user account with the "Casper Imaging - PreStage Imaging and Autorun Imaging" privilege is now required for PreStage imaging and Autorun imaging workflows.

For more information on the permissions required for imaging computers, see the following Knowledge Base article:
Imaging Computer Permission Requirements

v9.101.0

Apple has deprecated the ability to share APFS-formated volumes using AFP starting with macOS 10.13

Starting with macOS 10.13, Apple has deprecated the ability to share Apple File System (APFS)-formatted volumes using Apple Filing Protocol (AFP). Computers formatted with APFS can still mount AFP shares, but cannot share over AFP.

When preparing to upgrade your file share server to macOS 10.13, change the sharing protocol to SMB and update the protocol set for that distribution point in the JSS.

If you need assistance or have questions, contact your Jamf account representative.

v9.100.0

Change to SSL certificates issued by the JSS built-in CA

SSL certificates issued by the JSS built-in CA now include a "Subject Alternative Name" (SAN) extension to meet the updated requirements for SSL certificates from Google Chrome. As of Chrome 58, SSL certificates must include a "Subject Alternative Name" (SAN) extension.

v9.100.0

Removed product documentation from the JSS Installers

The following PDF files have been removed from the JSS Installers:

Casper Suite Release Notes
Casper Suite Administrator's Guide
QuickStart Guide for Managing Computers
QuickStart Guide for Managing Mobile Devices
Jamf Software Server Installation and Configuration Guide for Mac
Jamf Software Server Installation and Configuration Guide for Windows
Jamf Software Server Installation and Configuration Guide for Linux
Manually Installing the Jamf Software Server

Links to this documentation in web-based format are now available on the JSS Installer download page on Jamf Nation. To access this page, log in to Jamf Nation and go to:
https://www.jamf.com/jamf-nation/my/products

You can also access documentation in PDF and web-based format at:
https://www.jamf.com/resources.

v9.100.0

Incremental upgrade required when using a policy to upgrade computers with macOS 10.9 or earlier to macOS 10.12.4 or later

When using a policy to upgrade computers with macOS 10.9 or earlier to macOS 10.12.4 or later, you must first perform an incremental upgrade to any version between macOS 10.10 and macOS 10.12.3. You cannot upgrade a computer with macOS 10.9 or earlier directly to macOS 10.12.4 or later without first performing this incremental upgrade.

If you have questions or experience any issues during an upgrade, contact your Jamf account representative.

v9.99.0

Connection to Apple GSX requires TLS 1.2

The Casper Suite v9.99.0 and later use TLS 1.2 for GSX by default, regardless of Java version.

For the Casper Suite v9.98 or earlier, you must upgrade to Java 1.8 to maintain GSX connection.

v9.99.0

Removed support for Home Screen Layout web clips for mobile device configuration profiles

Web clips can no longer be set for the Dock or page layouts in the Home Screen Layout payload for mobile device configuration profiles. After upgrading to v9.99.0 or later, previously set web clips will no longer display when viewing mobile device configuration profiles in the JSS.

v9.98

Change to trust settings of Tomcat SSL certificates for user-initiated enrollment

As a result of an Apple security feature, beginning with iOS 10.3, during user-initiated enrollment of a device, the JSS built-in certificate authority (CA) signed Tomcat SSL certificate is not trusted by default, causing the MDM profile installation to fail. This is also true of any Tomcat SSL certificates that are self-signed or issued from a CA that the device does not trust by default. In previous versions of iOS, installing the CA certificate during enrollment caused the device to trust the CA but this is no longer the case. This is the result of intended behavior by Apple to avoid significant security vulnerabilities and will not be resolved.
It is recommended that you obtain a publicly trusted web server certificate to avoid security vulnerabilities.
For a list of trusted certificates for iOS devices, see the following article from Apple's support website:
Lists of available trusted root certificates in iOS

v9.98

Extended startup time when upgrading (one-time impact)

When upgrading from v9.97 or earlier to v9.98 or later, an additional database index is added during the initial server startup to improve performance of applications table queries. This one-time extended startup could take anywhere from a few additional minutes to several additional hours, depending on the size of your applications table and the hardware used in your environment.

It is important that you do not stop the startup process. If you have questions or experience any issues during startup, contact your Jamf account representative.

v9.98

Change to the SSL Certificate Verification Setting

The Enable SSL certificate verification checkbox has been changed to the SSL Certificate Verification pop-up menu with the options "Always", "Always except during enrollment", and "Never".

For more information on this change and instructions on how to safely configure SSL certificate verification in the JSS, see the following Knowledge Base articles:

v9.96

Removed support for macOS 10.5 and 10.6

The Casper Suite v9.96 removes support for macOS 10.5 and 10.6.

For information on removing unsupported computers from the JSS, see the Removing the Management Framework from Multiple Computers Knowledge Base article.

v9.96

Deprecated support for macOS 10.7 and 10.8

Features implemented in the Casper Suite v9.96 or later are no longer supported on computers with macOS 10.7 and 10.8.

Workflows implemented prior to v9.96 will continue to function, but they may require earlier versions of the client applications.

v9.96

Change to JDS instance installation

JDS instances are no longer installed during fresh installations of the JSS.

v9.93

Loss of certain customizations when upgrading to Tomcat 8

When upgrading from Tomcat 7 to Tomcat 8 on Windows, any customizations to CATALINA_OPTS or JAVA_OPTS will be lost.

To keep your customizations, when upgrading your JSS, click Custom in the Setup Type pane. Click Next and then click Upgrade. In the Summary pane, click Open Settings to review and set your customizations.

v9.93

Change to server.xml

In Tomcat 8 or later, JasperListener prevents the JSS from starting and must be removed. The JSS Installer automatically makes the necessary changes to Tomcat's server.xml by removing the <Listener className="org.apache.catalina.core.JasperListener" /> line.

v9.93

Change to database.xml

The Database Driver in the database.xml is now set to org.mariadb.jdbc.Driver during JSS upgrades.

v9.92

Criteria name change

The advanced search and smart group criteria Subscriber MCC will now be listed as Current Carrier Network.

v9.92

Criteria name change

The advanced search and smart group criteria Subscriber MNC will now be listed as Home Carrier Network.

v9.8

New location for jamf binary

The jamf binary is automatically moved from /usr/sbin/jamf to its new location, /usr/local/jamf/bin/jamf , during an upgrade to the Casper Suite v9.8.

During the upgrade, the database is scanned for packages, scripts, and extension attributes that reference the previous location of the binary. If items are found, notifications are displayed in the JSS after the upgrade is complete. These items need to be modified to reference the new location of the binary, which can be done in the JSS by clicking the notifications.

Items that are not stored in the database and reference the previous location of the binary need to be modified to reference the new location.

v9.8

Change in the removal of devices from DEP

The JSS can no longer be used to remove a device from Apple's Device Enrollment Program (DEP). Go to the Apple Deployment Programs website to remove the device.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.