Managing Legacy Kernel Extensions in macOS Using Jamf Pro

Before you can restart target computers, you need the management ID of the computers. You can access this information only in the Jamf Pro API by executing a command in Terminal similar to the following:

curl --location --request GET 'https://YOUR_JAMF_PRO_URL/api/preview/computers' --header 'Authorization: Bearer YOUR_BEARER_TOKEN'

The default response contains information for 100 computers. If you have more than 100 computers in your environment, you can add the following to the endpoint URL to expand the response:

?page=#	Retrieves a specified page in the response
?page-size=###	Increases the number of computers contained in each page of the response. The maximum number is 2000.

To expand the response, execute a command in Terminal similar to the following example:

curl --location --request GET 'https://YOUR_JAMF_PRO_URL/api/preview/computers?page=2&page-size=2000' --header 'Authorization: Bearer YOUR_BEARER_TOKEN'

The following code sample demonstrates how to restart a computer:

curl --location --request POST 'https://JAMF_PRO_URL/api/preview/mdm/commands' \
--header 'Authorization: Bearer JAMF_PRO_AUTH_TOKEN' \
--header 'Content-Type: application/json' \
--data-raw '{
    "clientData": [
        {
            "managementId": "A9C3D1F0-DCB2-4D52-84C6-D5AD60140B04",
            "clientType": "COMPUTER"
        }
    ],
    "commandData": {
        "commandType": "RESTART_DEVICE",
        "rebuildKernelCache": "true",
        "kextPaths": [
            "kext1",
            "kext2",
            "kext3"
        ],
        "notifyUser": "true"
    }
}'

Computers are immediately restarted via MDM and the kernel cache is rebuilt to include the specified kernel extensions. If the NotifyUser key is set to true, the following scenarios dictate how the notification is displayed to users and when the computer restarts:

• If no user is logged in to the computer, the computer immediately restarts without displaying a notification

• If a user is currently logged in to the computer, a persistent Notification Center banner is displayed requesting them to restart the computer.

• If Fast User Switching is enabled on the computer and the login screen is displayed, a notification is displayed to the next user that logs in requesting them to restart the computer regardless of any currently logged in user status.

• If the computer does not have macOS 11.3 or later, the computer immediately restarts without displaying a notification.