What's New in This Release

Updated 01 October 2018
Important:

  • For Jamf Pro customers using the macOS Intune Integration, the following requirement has been added when upgrading to Jamf Pro 10.7.0 or later. For the macOS Intune Integration to work after upgrading, an Azure global administrator must reaffirm consent for the Jamf Native macOS Connector app to be added to the Azure AD tenant. This updated consent is necessary so that the Jamf Native macOS Connector app can allow each registered computer to connect to Azure Active Directory to collect its identifier.
    To reaffirm consent, in Jamf Pro an Azure global administrator must navigate to Settings > Global Management > Conditional Access > macOS Intune Integration and click Open administrator consent URL.

  • For on-premise Jamf Pro customers upgrading to 10.7.1, review the On-Prem Jamf Pro Customers Upgrading to 10.7 Knowledge Base article before upgrading to remediate a potential known issue with smart computer groups. In addition, review the Server.xml Changes for Tomcat 8.5 Knowledge Base article to learn about changes that may impact your environment when upgrading to Jamf Pro 10.7.0 or later using the installers.

Compatibility with macOS 10.14

Jamf Pro 10.7.1 provides compatibility with macOS Mojave 10.14. This includes compatibility for the following management workflows:

  • Enrollment and inventory reporting

  • Configuration profiles

  • App distribution

  • Self Service installation

  • Self Service launches and connections

  • App distribution via Self Service

  • Policies

  • Restricted software

Note:

  • You must use Jamf Pro 10.7.1 or later to successfully create an account (including during enrollment) on computers with macOS 10.14.

  • macOS 10.14 computers with the Apple T2 chip cannot be imaged due to Secure Boot updates.

Security Setting to Automatically Install the Privacy Preferences Policy Control Profile

When you enroll a computer with Jamf Pro, the computer automatically becomes managed by Jamf Pro. This allows you to perform remote management tasks on the computer. To manage and perform some tasks on computers with macOS 10.14 or later, you must allow the Jamf management framework to access the target computer's system files and processes by installing the Privacy Preferences Policy Control profile.

Note: The Privacy Preferences Policy Control profile is part of a security feature with macOS 10.14. For more information about the Privacy Preferences Policy Control profile, see the following website:
https://help.apple.com/deployment/mdm/#/mdm38df53c2a

Jamf Pro automatically installs the Privacy Preferences Policy Control profile on computers with macOS 10.14 or later when you upgrade to Jamf Pro 10.7.1 or later. This allows the Jamf management framework to be installed on computers to access the necessary system files and processes for managing computers and performing the remote management tasks on the computers.

Note: You can also install the Privacy Preferences Policy Control profile by uploading an unsigned .mobileconfig using the Jamf Pro web app or the Classic API.

For more information about the contents of the Privacy Preferences Policy Control profile, see the Preparing your Organization for User Data Protections on macOS 10.14 Knowledge Base article.

Requirements

To install the Privacy Preferences Policy Control profile on computers with macOS 10.14 or later, the computers must have a user approved MDM status. Jamf Pro attempts to install the profile on all computers with macOS 10.14 or later. If an eligible computer does not have a user approved MDM status, the profile stays queued and automatically attempts to re-install when the computer meets the user approved MDM status. For more information about how to achieve a user approved MDM status, see the Managing User Approved MDM with Jamf Pro Knowledge Base article .

In addition, push notifications must be enabled to distribute the Privacy Preferences Policy Control profile. To enable push notifications, your environment must use MDM for computers. If your environment does not use MDM, this profile cannot be installed.

Installing the Privacy Preferences Policy Control Profile

To automatically install the Privacy Preferences Policy Control profile on computers, the Automatically install a Privacy Preferences Policy Control profile (macOS 10.14 or later) option must be selected in the Security settings. Navigate to Settings > Computer Management > Security.

Note: The Automatically install a Privacy Preferences Policy Control profile (macOS 10.14 or later) option is selected by default when Jamf Pro is upgraded to 10.7.1 or later or when installing a new instance of Jamf Pro 10.7.1 or later.

To remove the Privacy Preferences Policy Control profile and the Jamf management framework from computers, deselect the Automatically install a Privacy Preferences Policy Control profile (macOS 10.14 or later) option. The next time computers submit inventory, the profile is removed.

Further Considerations

Because of increased user data protections with macOS 10.14, you cannot enable remote management remotely using the SSH protocol. To enable remote management on computers with macOS 10.14, the user must click the Screen Sharing checkbox in System Preferences.

Bug Fixes

This release of Jamf Pro includes the following bug fixes:

  • [PI-006198] Fixed an issue that prevented Jamf Pro from mass sending the Update OS version and built-in apps remote command to computers.

  • [PI-006265] Fixed an issue that caused smart computer group criteria values for "Computer Group" to be case-sensitive, causing membership to calculate incorrectly if the case used in the specified smart group name did not match.

Product Documentation

For information on the new features, bug fixes, and known issues included in 10.7.0, as well as instructions on upgrading Jamf Pro, see the 10.7.0 Jamf Pro Release Notes.

For additional Jamf Pro documentation, see the following:

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2018 Jamf. All rights reserved.