Deploying Jamf Trust to Unmanaged Windows Devices - Jamf Security Cloud Portal Setup Guide

Jamf Security Cloud Portal Setup Guide
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can deploy Jamf Trust manually to a small number of unmanaged Windows devices.

Important:

This solution is not suitable for large-scale production deployments. Jamf recommends that you use a UEM solution to deploy Jamf Trust to managed devices.

Requirements

  • Windows devices that meet the system requirements for the capabilities you plan to activate. Jamf Trust for Windows natively supports devices with x64 or ARM processors.

  • An activation profile that is compatible with Windows devices and which defines the service capabilities you would like to deploy to your target devices.

  • To allow users to activate the app by signing in via your organization's identity provider (IdP), identity-based provisioning mus be enabled.

    For more information, see Enabling Identity-Based Provisioning with Jamf Security Cloud.

Note:

If a Windows app or service with a blocked hostname is added to a device, traffic to the app or service will be blocked but the hosted block page will not be displayed. To enable the page, you must create a custom rule for the new app or service.

  1. Download the latest version of the Jamf Trust for Windows.

    The latest version of the Jamf Trust app for Windows is available from Jamf Account. Jamf Trust for Windows will no longer be available from the Microsoft App Center beginning April 1st, 2025. To access Jamf Account, you will need to create a Jamf ID which provides a single set of credentials to use with all Jamf platforms. For more information, see Jamf ID in the Jamf Account Documentation.

  2. Distribute the file to your users with unmanaged Windows computers.
  3. Instruct users to complete the following steps:
    1. Double-click the downloaded MSI file to start the installation.
    2. Follow all prompts to install the application.
    3. (Optional) To activate the app with an identity provider (IdP), select your organization's IdP from the list, then sign in with your credentials.
    4. (Optional) To activate the app with a shareable link, copy and paste shareable URL from a valid activation profile, and then follow the remaining app activation steps.

The Windows device is enrolled and assigned the service capabilities defined in the activation profile that was used to activate the Jamf Trust app.