Installing Jamf Pro using the installer involves the following steps:

Install the prerequisite software (if you haven’t already).
Configure the firewall.
Run the Jamf Pro Installer.
Create the Jamf Pro database.
Connect to the Jamf Pro server.
(Optional) Disable TLS 1.0 and 1.1 in Java 11.
Secure your Jamf Pro server.

Note: It is recommended that Jamf Pro be installed before the Jamf Pro database is created. The advantage is that the Jamf Pro Server Tools CLI is installed with the Jamf Pro installer. The CLI simplifies the process of creating the database as opposed to creating the database manually. In addition, while the Jamf Pro database can be created and configured before Jamf Pro is installed, the Jamf Pro-to-MySQL connection information cannot be configured until after Jamf Pro is installed.

Requirements

Note: The Jamf Pro web app and the MySQL database can be installed on the same server or different servers. You may want to install the MySQL database on a different server if you have a larger environment that requires more resources. Additional configuration is required to implement this scenario. For more information, see Installing the Jamf Pro Web App and MySQL on Different Servers.

The server used to host Jamf Pro should meet the minimum requirements for operating system, Tomcat version, database configuration, and Java installation. For additional information on these Jamf Pro Server Environment requirements, see the Jamf Pro Release Notes for your version of Jamf Pro.

In addition, the following resources are recommended as the minimum allocation for a typical installation of Jamf Pro:

Linux

A 64-bit capable Intel processor
8 GB of RAM
150 GB of disk space available
The "wget" utility installed
Ports 8443 and 8080 available

Note: Each installation of Jamf Pro and its required services is unique, and requirements, such as Jamf Pro web app memory, may vary depending on your implementation. For information about allocating additional memory to the Jamf Pro web app, see Jamf Pro Web App Memory.

If you have questions regarding scaling your environment’s resources beyond the typical recommendations, contact Jamf Support.

Step 1: Install the Prerequisite Software

Java must be installed on the server where you will install Jamf Pro. MySQL must be installed on a server before you can create the Jamf Pro database.

For instructions, see the Installing Java and MySQL for Jamf Pro 10.14.0 or Later article.

Note: MySQL is not required to be installed on the same server as the Jamf Pro web application. For more information, see Clustering.

Step 2: Configure the Firewall

The following instructions will assist you in configuring the firewall to allow inbound access on port 8443, which provides access to the Jamf Pro web application.

Red Hat Enterprise Linux

The firewall is enabled by default on Red Hat Enterprise Linux. However, the firewall must be configured to allow traffic through the port used by Jamf Pro (typically 8443).

Check to see if the firewall is running by executing the following command:
```
systemctl status firewalld
```
If the firewall is "active":
1. List the ports that are open by executing the following command:
```
sudo firewall-cmd --list-ports
```
2. Edit the firewall configuration to allow access to port 8443 by executing the following commands:
```
sudo firewall-cmd --zone=public --add-port=8443/tcp --permanent
```
```
sudo firewall-cmd --reload
```

For more information, see the following webpages:

Ubuntu

The firewall is not enabled by default in Ubuntu. However, it is highly recommended that you enable and configure the firewall on any production systems.

Check to see if the firewall is running by executing the following command:
```
sudo ufw status
```
If the firewall is not running, enable it by executing the following command:
```
sudo ufw enable
```
Edit the firewall configuration to allow access to port 8443 by executing the following commands:
```
sudo ufw allow 8443/tcp
```
```
sudo ufw reload
```

For more information, see the following webpage:
https://ubuntu.com/server/docs/security-firewall

Step 3: Run the Jamf Pro Installer

The Jamf Pro Installer for Linux installs Apache Tomcat, the Jamf Pro web app, and Jamf Pro Server Tools.

Copy the Jamf Pro Installer for Linux (jamfproinstaller.run) to the server.

Note: To obtain the Jamf Pro Installer for Linux, log in to Jamf Account and navigate to the Products page for Jamf Pro.
Log in to the server as a user with superuser privileges.
Initiate the installer by executing a command similar to the following:
```
sudo sh /path/to/jamfproinstaller.run
```
If your server has less available disk space than recommended to install Jamf Pro, you will be prompted to either continue or abort the installation process. Type “y” to proceed or “n” to abort.

You can bypass the disk space check by executing the installer with the -d flag. Execute a command similar to the following:
```
sudo sh /path/to/jamfproinstaller.run -- -d
```
When the requirement check is complete, type "y" to proceed.
Configure Jamf Pro to start automatically when the server is rebooted:
1. Check the state of the Tomcat service's “enabled on boot” setting by executing the following command:
```
sudo systemctl is-enabled jamf.tomcat8.service
```
2. If the result indicates the Tomcat service is “disabled”, enable the service permanently by executing the following command:
```
sudo systemctl enable jamf.tomcat8
```
3. Confirm the “enabled on boot” setting is "enabled" by executing the following command:
```
sudo systemctl is-enabled jamf.tomcat8.service
```
4. If the Tomcat service is not already running, you can start the Tomcat service manually by rebooting the server or by executing the following command:
```
sudo systemctl start jamf.tomcat8
```

Step 4: Create the Jamf Pro Database

You must create a MySQL database before you can use Jamf Pro. For instructions, see the Creating the Jamf Pro Database Using the Jamf Pro Server Tools Command-Line Interface article.

Step 5: Connect to the Jamf Pro Server

Configure the database connection settings using Jamf Pro Server Tools GUI or CLI. For instructions, see the Editing the Database Connection Using Jamf Pro Server Tools article.
Access Jamf Pro by opening a web browser and typing the protocol, IP address or hostname of the server, and port. For example: https://JAMF_PRO_URL.com:8443/
Note: Some web browsers may initially prevent access to Jamf Pro on port 8443 and may produce an "invalid certificate" error. If this error occurs, do the following:
1. Enter your Jamf Pro server URL in the web browser's address bar using "http" and port 8080 (e.g., "http://JAMF_PRO_URL.com:8080").
2. When prompted by the Jamf Pro setup assistant for the Jamf Pro URL, enter your Jamf Pro server URL using "https" and port 8443 (e.g., https://JAMF_PRO_URL.com:8443).
You can begin using your Jamf Pro server URL to access Jamf Pro after you have uploaded a valid certificate and restarted Tomcat. For more information, see SSL Certificate in the Jamf Pro Administrator's Guide.

Step 6: (Optional) Disable TLS 1.0 and 1.1 in Java 11

If you are using the TLS 1.0 or 1.1 protocols in Java 11 for any existing workflows, it is recommended that you disable them since they are deprecated. For instructions, see the following article: Disabling TLS 1.0 and 1.1 in Java 11.

Step 7: Secure Your Jamf Pro Server

Secure your Jamf Pro server by following the recommendations in the Jamf Pro Security Recommendations article.

Installing Jamf Pro Using the Installer