What's New

Compatibility with macOS, iOS, iPadOS, and tvOS

Jamf Pro now provides compatibility for the following:

  • macOS 10.15.4

  • iOS 13.4

  • iPadOS 13.4

  • tvOS 13.4

This includes compatibility for the following management workflows:

  • Enrollment and inventory reporting

  • Configuration profiles

  • App distribution

  • Self Service installation

  • Self Service launches and connections

  • App distribution via Self Service

  • Policies

  • Restricted software

Compatibility and new feature support are based on testing with the latest Apple beta releases.

Jamf Pro Interface Restyling

To improve ease of use, the Done button images/download/thumbnails/80748248/DONE_cropped.png has been restyled and is now located under the breadcrumbs in the upper-left corner of the pane. In addition, some buttons in the Jamf Pro interface have been restyled. To view the button label, hover over the button icon.

images/download/attachments/80747720/done_button.png

Important: Jamf Pro does not warn a user about unsaved changes when clicking Done images/download/thumbnails/80748248/DONE_cropped.png . To save your changes, click Save before clicking Done images/download/thumbnails/80748248/DONE_cropped.png .

Activation Lock Enhancements

Jamf Pro now provides support for Activation Lock enabled by users on compatible computers with macOS 10.15 or later. You can use Jamf Pro in the following ways to leverage Apple's Activation Lock feature:

  • Enable Activation Lock A user can now enable Activation Lock on their computer when they log in to an iCloud account using their Apple ID. For computers that are currently enrolled, Jamf Pro now allows you to use a remote command to allow end users to enable Activation Lock. Activation Lock is enabled when the user enables Find My on their computer.

  • Collect Activation Lock information—Jamf Pro now collects the Activation Lock status of a computer and the Activation Lock bypass code for the computer. This information is collected and displayed in the computer's inventory information.

  • Clear Activation Lock using a Remote Command—You can now clear Activation Lock on a computer using the Wipe Computer remote command.

  • Disable and prevent Activation Lock—You can now use a remote command in Jamf Pro to disable and prevent Activation Lock directly on a computer. Unlike clearing Activation Lock by sending a Wipe Computer remote command, disabling and preventing Activation Lock disables Activation Lock without wiping the computer and prevents an end user from re-enabling Activation Lock. Jamf Pro disables Activation Lock using the bypass codes stored in the computer's inventory information.

For more information, see the Leveraging Apple’s Activation Lock Feature with Jamf Pro Knowledge Base article.

Note: Activation Lock for computers applies to compatible computers with macOS 10.15 or later. For more information on compatibility, see Apple's support website:
https://support.apple.com/HT208987

In addition, Jamf Pro now prevents a user from enabling Activation Lock on an iPad if the device has been enabled as Shared iPad.

Support for Shared iPad with Apple Business Manager

If your environment integrates with Apple Business Manager, you can now enable Shared iPad for devices during enrollment with Jamf Pro using a PreStage enrollment. This allows users to log in to an iPad that has been enabled as Shared iPad using a Managed Apple ID. Jamf Pro offers the same device inventory reporting capabilities and Shared iPad commands available to customers using Apple School Manager. For more information about Shared iPad, see Shared iPad overview in Apple's Mobile Device Management Settings.

Additional Functionality for Enrollment Packages

You can now delete a custom manifest file that was uploaded to Jamf Pro for use with an enrollment package.

To access this feature, navigate to Settings > Computer Management > Packages, and then click the package you want to delete the manifest file for.

Support for Custom Apps from Apple School Manager

If your environment integrates with Apple School Manager, you can distribute custom apps using Jamf Pro. For more information about custom apps, see Learn about Custom apps in Apple School Manager in Apple’s Apple School Manager User Guide.

Automated Device Enrollment Enhancements

The process that syncs the information in Computer and Mobile Device PreStage Enrollments with Apple School Manager or Apple Business Manager has been improved and now syncs information every two minutes. This enables the information to update more frequently.

Jamf Binary Inventory Collection Enhancement

You can now allow or prevent local administrators on the computer from changing User and Location inventory information in Jamf Pro with the jamf binary by using the Allow local administrators to use the jamf binary recon verb to change User and Location inventory information in Jamf Pro checkbox. This setting is enabled by default and can be configured by navigating to Settings < Computer Management in Jamf Pro. If you do not have any workflows that use the -endUsername option to assign users to devices, it is recommended that you disable this setting.

Computer Configuration Profiles

The following table provides an overview of the computer configuration profile enhancements in this release, organized by payload:

Setting

Key Included in Payload

OS Requirement

Notes

Content Caching payload—General tab (Enhancements)

Automatically activate Internet connection sharing (macOS 10.15.4 or later)

AutoEnableTetheredCaching

macOS 10.15.4 or later

You can now automatically enable Internet connection sharing on target computers. This setting requires you to allow sharing the computer's Internet connection and cached content with iOS devices connected using USB.

Restrictions payload—Applications tab (Enhancements)

Allow accessing websites using TLS 1.0 and 1.1 (macOS 10.15.4 or later)

allowDeprecatedWebKitTLS

macOS 10.15.4 or later

You can now allow websites that use TLS 1.0 and TLS 1.1 to be accessed using Safari.

Additional Reporting Capabilities for Computers

The attributes below are now displayed in a computer’s inventory information in Jamf Pro, organized by category of information. You can create a smart group or an advanced search based on the following attributes:

Inventory Attribute

Requirement

Value Returned in Inventory Information

Smart Group/Advanced Search Criteria

Security Category (Enhancements)

Activation Lock

Collected for compatible computers with macOS 10.15 or later in Apple School Manager or Apple Business Manager

The following values are returned for "Activation Lock" in a computer's inventory information:

  • Enabled

  • Not Enabled

Activation Lock

Content Caching Category (New Category)

Activated

Collected for computers with macOS 10.15.4 or later

For more information about the values returned, see this developer documentation from Apple.

Content Caching - Activated

Active

Content Caching - Active

Actual Cache Used

Content Caching - Actual Cache Used

Cache Free

--

Cache Limit

Content Caching - Cache Limit

Cache Status

Content Caching - Cache Status

Cache Used

--

Data Migration Completed

--

Data Migration Progress

--

Max Cache Pressure in Last Hour

--

Personal Cache Free

--

Personal Cache Limit

--

Personal Cache Used

--

Port

--

Public Address

--

Registration Error

--

Registration Response Code

--

Registration Started

--

Registration Status

--

Registration Media

--

Server GUID

--

Startup Status

--

Tetherator Status

Content Caching - Tetherator Status

Total Bytes are Since

--

Total Bytes Dropped

--

Total Bytes Imported

--

Total Bytes Returned to Children

--

Total Bytes Returned to Clients

--

Total Bytes Returned to Peers

--

Total Bytes Stored from Origin

--

Total Bytes Stored from Parents

--

Total Bytes Stored from Peers

--

Additional Computer Remote Commands

The following remote commands for computers have been added to Jamf Pro:

Remote Command

Requirement

Notes

Available as a Mass Action

Set Activation Lock

  • Compatible computers with macOS 10.15 or later

  • In Apple School Manager or Apple Business Manager

You can now allow the user to enable Activation Lock directly on a computer that is currently enrolled with Jamf Pro, or you can disable and prevent Activation Lock directly on computers.

images/download/thumbnails/80747720/checkmark.png

Mobile Device Configuration Profiles

The following table provides an overview of the mobile device configuration profile enhancements in this release, organized by payload:

Setting

Key Included in Payload

OS Requirement

Notes

Restrictions payload—Functionality tab (Enhancements)

Allow Shared iPad temporary session (iOS 13.4 or later)

allowSharedDeviceTemporarySession

iPadOS 13.4 or later

You can now enable temporary sessions for iPads that have been enabled as Shared iPad.

Restrictions payload—Applications tab (Enhancements)

Allow accessing websites using TLS 1.0 and 1.1 (iOS 13.4 or later)

allowDeprecatedWebKitTLS

iOS 13.4 or later

You can now allow websites that use TLS 1.0 and TLS 1.1 to be accessed using Safari.

Jamf Pro Server Tools 2.7.2

The following enhancements are included in Jamf Pro Server Tools 2.7.2, which is installed with Jamf Pro 10.20.0:

  • The backup directory is no longer set by default. Instructions for setting the backup directory have been added to the Using the Jamf Pro Server Tools Command-Line Interface Knowledge Base article.

  • Jamf Pro Server Tools no longer attempts to delete backups in subdirectories when trimming backups.

  • Error messages have been updated to be more descriptive and provide instructions for resolving issues.

Jamf Pro API Changes and Enhancements

The Jamf Pro API beta is open for user testing. The base URL for the Jamf Pro API is /uapi. To access the Jamf Pro API documentation, append "/uapi/doc" to your Jamf Pro URL. For example: https://jss.instancename.com:8443/uapi/doc

Note: As the Jamf Pro API continues to be developed, changes will be made in future releases that may impact or break functionality. We strongly encourage that you test existing workflows using the Jamf Pro API before upgrading your production environment.

The following enhancements were made:

  • Changed the type of all "id" fields in paths from integer to string

  • Added the ability to use filtering on select endpoints

The following endpoints were added:

  • POST /v1/buildings/delete-multiple

  • GET /v1/cloud-ldaps/{id}/connection/bind

  • GET /v1/cloud-ldaps/{id}/connection/search

The following endpoints were removed:

  • GET /devices/advancedSearches

  • POST /devices/advancedSearches

  • GET /devices/advancedSearches/choices

  • POST /devices/advancedSearches/deleteSearches

  • GET /devices/advancedSearches/{id}

  • PUT /devices/advancedSearches/{id}

  • DELETE /devices/advancedSearches/{id}

  • GET /engage

  • PUT /engage

  • POST /settings/deleteBuildings

  • GET /settings/enrollment

  • PUT /settings/enrollment

  • GET /settings/enrollment/access-groups

  • GET /settings/enrollment/access-groups/{group-key}

  • PUT /settings/enrollment/access-groups/{group-key}

  • DELETE /settings/enrollment/access-groups/{group-key}

  • GET /settings/enrollment/filtered-language-codes

  • GET /settings/enrollment/history

  • POST /settings/enrollment/history/notes

  • GET /settings/enrollment/language-codes

  • GET /settings/enrollment/languages

  • GET /settings/enrollment/languages/{language}

  • PUT /settings/enrollment/languages/{language}

  • DELETE /settings/enrollment/languages/{language}

  • GET /settings/enrollment/settings

  • PUT /settings/enrollment/settings

  • GET /settings/obj/building

  • POST /settings/obj/building

  • GET /settings/obj/building/{id}

  • PUT /settings/obj/building/{id}

  • DELETE /settings/obj/building/{id}

  • GET /settings/obj/building/{id}/history

  • POST /settings/obj/building/{id}/history/notes

  • GET /settings/obj/cache

  • PUT /settings/obj/cache

  • GET /settings/obj/checkIn

  • PUT /settings/obj/checkIn

  • GET /settings/obj/checkIn/history

  • POST /settings/obj/checkIn/history/notes

  • GET /settings/obj/reenrollment

  • PUT /settings/obj/reenrollment

  • GET /settings/obj/reenrollment/history

  • POST /settings/obj/reenrollment/history/notes

  • GET /settings/scripts

  • POST /settings/scripts

  • GET /settings/scripts/{id}

  • PUT /settings/scripts/{id}

  • DELETE /settings/scripts/{id}

  • GET /settings/scripts/{id}/download

  • GET /settings/scripts/{id}/history

  • POST /settings/scripts/{id}/history/notes

  • GET /v1/cloud-ldaps/{id}/connection

  • DELETE /v1/buildings

Changes were made to the following endpoints that may break compatibility with clients:

  • GET /patch/obj/{id}

  • PUT /patch/obj/{id}

  • POST /patch/searchActivePatchHistory

  • POST /patch/searchPatchPolicyLogs

  • GET /patch/{id}

  • PUT /patch/{id}

  • GET /v1/buildings

  • POST /v1/buildings

  • GET /v1/buildings/{id}

  • PUT /v1/buildings/{id}

  • GET /v1/enrollment-customization

  • POST /v1/enrollment-customization

  • GET /v1/enrollment-customization/{id}

  • PUT /v1/enrollment-customization/{id}

  • GET /v1/jamf-pro-information

  • GET /v1/jamf-pro-server-url/history

  • PATCH /v1/mobile-devices/{id}

  • GET /v1/mobile-devices/{id}/detail

For more information on these changes, see the Jamf Pro API documentation.

RSQL Filtering

Starting in Jamf Pro 10.20.0, you can add RSQL filters to API queries for history information of some endpoints. For example, the following query would return history entries of the Engage resource that were created by a user with a username of “admin” on the date of 2019-12-01:

/uapi/v1/engage/history?search=username==admin and date==2019-12-01

The following endpoints support filtered queries:

  • /v1/engage/history

  • /v1/buildings/{id}/history

  • /v1/categories/{id}/history

  • /v1/check-in/history

  • /v1/departments/{id}/history

  • /v1/scripts/{id}/history

Support for RSQL filtering in additional endpoints will be added in upcoming releases of Jamf Pro.

Further Considerations

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2020 Jamf. All rights reserved.