Installing Jamf Pro Using the Installer
Installing Jamf Pro using the installer involves the following steps:
Install the prerequisite software (if you haven't already).
Run the Jamf Pro Installer.
Create the Jamf Pro database.
Connect to the Jamf Pro server.
(Optional) Disable TLS 1.0 and 1.1 in Java 11.
Secure your Jamf Pro server.
Jamf recommends that you install Jamf Pro before creating the Jamf Pro database. The advantage is that the Jamf Pro Server Tools CLI is installed with the Jamf Pro installer. The CLI simplifies the process of creating the database as opposed to creating the database manually. In addition, while the Jamf Pro database can be created and configured before Jamf Pro is installed, the Jamf Pro-to-MySQL connection information cannot be configured until after Jamf Pro is installed.
General Requirements
The Jamf Pro web app and the MySQL database can be installed on the same server or different servers. You may want to install the MySQL database on a different server if you have a larger environment that requires more resources. Additional configuration is required to implement this scenario. For more information, see Installing the Jamf Pro Web App and MySQL on Different Servers.
The server used to host Jamf Pro should meet the minimum requirements for operating system, Tomcat version, database configuration, and Java installation. For additional information on these Jamf Pro Server Environment requirements, see the Jamf Pro Release Notes for your version of Jamf Pro.
In addition, the following resources are recommended as the minimum allocation for a typical installation of Jamf Pro:
- Windows
-
-
A 64-bit capable Intel processor
-
8 GB of RAM
-
150 GB of disk space available
-
Ports 8443 and 8080 available
-
The Jamf Pro Installer for Windows automatically creates a firewall exception for port 8443. If you are using a third-party firewall, or if you are using a port other than 8443, you will need to manually add a firewall exception.
In environments where the double-byte character set encoding is required, use English as the system language for the server used to host Jamf Pro to avoid potential display issues.
Full local administrator privileges are required to install Jamf Pro on Windows Server. If you are unable to install Jamf Pro, Group Policy Object restrictions may be the cause. Check the GPO settings or contact someone in your organization who can ensure that GPO restrictions allow you full administrator privileges.
Each installation of Jamf Pro and its required services is unique, and requirements, such as Jamf Pro web app memory, may vary depending on your implementation. For information about allocating additional memory to the Jamf Pro web app, see Jamf Pro Web App Memory.
If you have questions regarding scaling your environment's resources beyond the typical recommendations, contact Jamf Support.
Step 1: Installing the Prerequisite Software
Java and MySQL must be installed on the server before you can create the Jamf Pro database and run the Jamf Pro Installer. For instructions, see the Installing Java and MySQL for Jamf Pro 10.14.0 or Later article.
MySQL is not required to be installed on the same server as the Jamf Pro web application. For more information, see Configuring Clustering Settings.
Step 2: Running the Jamf Pro Installer
The Jamf Pro Installer for Windows installs Apache Tomcat, the Jamf Pro web app, and Jamf Pro Server Tools.
To obtain the Jamf Pro Installer for Windows, log in to Jamf Account and navigate to the Products page for Jamf Pro.
To run the Jamf Pro Installer for Windows, copy it to the server. Then open the installer and follow the onscreen instructions.
The installer must be run as an administrator.
Step 3: Creating the Jamf Pro Database
You must create a MySQL database before you can use Jamf Pro. For instructions, see the Creating the Jamf Pro Database Using the Jamf Pro Server Tools Command-Line Interface article.
Step 4: Connecting to the Jamf Pro Server
Step 5: (Optional) Disabling TLS 1.0 and 1.1 in Java 11
If you are using the TLS 1.0 or 1.1 protocols in Java 11 for any existing workflows, it is recommended that you disable them because they are deprecated. For instructions, see the Disabling TLS 1.0 and 1.1 in Java 11 article.
Step 6: Securing Your Jamf Pro Server
Secure your Jamf Pro server by following the recommendations in the Jamf Pro Security Recommendations article.
Installed Files and Folders
The following files and folders are installed when you run the Jamf Pro Installer:
- Jamf Pro web app
The files that make up the Jamf Pro web app are stored in the following location:
C:\Program Files\JSS\Tomcat\webapps\ROOT\
- Apache Tomcat
Tomcat is the web application server that runs the Jamf Pro web app. A directory named tomcat is installed in the following location:
C:\Program Files\JSS\
For more information about the version of Tomcat installed by the Jamf Pro Installer, see the Apache Tomcat Versions Installed by the Jamf Pro Installer article.
- server.xml
The Jamf Pro Installer installs a modified copy of Tomcat's server.xml file. This file enables SSL, ensures that Jamf Pro appears in the
root
context, and enables database connection pooling. It is installed in the following location:C:\Program Files\JSS\Tomcat\conf\
- keystore
Tomcat requires a keystore file to provide connections over SSL. The Jamf Pro Installer creates a default .keystore file and stores it in the following location:
C:\Program Files\JSS\Tomcat\certs\
- Jamf Pro Server Tools
Jamf Pro Server Tools, filename server-tools-gui.jar, is installed in the following location:
C:\Program Files\JSS\bin\
Jamf Pro Server Tools also has a command-line interface (CLI), filename jamf-pro.exe, that is installed in the same location.
- Database backup location
By default, Jamf Pro Server Tools stores database backups in the following location:
C:\Program Files\JSS\Backups\Database\
- Logs
Logs for the installation and for the Jamf Pro server are stored in the following location:
C:\Program Files\JSS\Logs\