Jamf Cloud Overview and FAQ

Jamf Cloud is a service offered by Jamf that allows you to host your Jamf Pro server in the Cloud.

For more information on what is included in Jamf Cloud, including information about Jamf Premium Cloud and Jamf Government Cloud, see the following webpage: https://www.jamf.com/products/jamf-cloud/

Migration and Security FAQs

How can I migrate my on-premise instance to Jamf Cloud?
A Jamf Migration Specialist can help you migrate devices, data, and settings to a Jamf Cloud-hosted instance. For more information, see the following webpage: https://www.jamf.com/resources/product-documentation/cloud-services-next-steps/
How is Jamf Cloud secured?
For information on Jamf's Security Policy and a Jamf Cloud security FAQ, see the following webpage: https://www.jamf.com/security/

For related information, see the following resources:

What safelist or firewall modifications are required for Jamf Cloud communication?
For information on what must be added to your safelist or firewall to allow inbound and outbound communication for Jamf Cloud, see the Permitting Inbound/Outbound Traffic with Jamf Cloud article.
Where can I view the status of Jamf Cloud?
You can use the following website to view the status of Jamf Cloud, including in-progress upgrades and scheduled maintenance: https://status.jamf.com

You can also subscribe to receive email notifications when an incident with Jamf Cloud is created, updated, or resolved.

Time Zone and Region FAQs

Where are the hosted data regions used by Jamf Cloud?
For information about the hosted data regions used by Jamf Cloud, see the Jamf Cloud Hosted Data Region Information article.
What time zone does Jamf Cloud use for logging?
Jamf Cloud uses Coordinated Universal Time (UTC) to time stamp logs. Jamf Premium Cloud customers can request to change the logging time zone for their environments.
How can I change the time zone for my Jamf Pro user account?
To change the time zone on your Jamf Pro account, navigate to the Account settings in Jamf Pro and select your desired time zone from the Time Zone pop-up menu. In addition, you can change the date format and disable relative dates (e.g., "Today").

Data and Access Management FAQs

Where can I view and download the Jamf Pro server logs for my Jamf Cloud-hosted environment?
The Jamf Pro Server Logs settings allow you to view and download the Jamf Pro server logs from the Jamf Pro web app. Server logs are time stamped using Coordinated Universal Time (UTC). For instructions, see the Jamf Pro Server Logs section in the Jamf Pro Administrator's Guide.
Can I stream Jamf Pro server logs from my Jamf Cloud-hosted environment to another data collection endpoint?
If you are a Jamf Premium Cloud customer, you can use Jamf Log Stream to forward JSSAccess and JamfChangeManagement logs to an Amazon S3 bucket or Splunk instance.

Logs are sent in uncompressed GZIP format every 5 minutes or when the log size reaches 5 MB.

How do I begin using Jamf Log Stream?
Contact your Jamf Account Manager to enable Jamf Log Stream and do the following:
  • Specify which logs you would like to stream. JSSAccess and JAMFChangeManagement logs can be streamed.

  • Provide your Jamf Account Manager one of the following:

    • The name of the Amazon S3 bucket you want to forward logs to

    • Your Splunk endpoint URL and authentication token

  • If streaming to an Amazon S3 bucket, assign the following policy to the S3 bucket:

    {
    
    
    "Version": "2012-10-17",
    "Id": "PolicyID",
    "Statement": [
        {
            "Sid": "StmtID",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::521540784405:role/jamflogs-kinesisstream"
            },
            "Action": [
                "s3:AbortMultipartUpload",
                "s3:GetBucketLocation",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads",
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource": [
                "arn:aws:s3:::<bucket-name>",
                "arn:aws:s3:::<bucket-name>/*"
            ]
        }
    ]
    }

    The specified logs will begin streaming to your data collection endpoint after your request has been processed.

    Important:

    If streaming JAMFChangeManagement logs, there will be a brief outage in your Jamf Pro environment to complete necessary database updates. If you are only streaming JSSAccess logs, no outage should occur.

What settings are accessible for a Jamf Cloud-hosted instance?
In addition to the standard Jamf Pro settings, you can access the following:
  • The Jamf Software Server log

  • The Jamf Change Management log

  • Enabling debugging in Jamf Pro

What settings are not accessible for a Jamf Cloud-hosted instance?
The following settings cannot be accessed in a Jamf Cloud-hosted instance:
  • Restarting Tomcat

  • MySQL queries and modifications

  • Environment resource allocations

  • HTTP debugging

If you need to access these settings, contact Jamf Support for assistance.