Enabling and Testing HTTPS Downloads in Jamf Pro

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

  1. In Jamf Pro, click Settings in the sidebar.
  2. In the Server section, click File share distribution points .
  3. Navigate to the distribution point on which HTTPS downloads will be enabled.
  4. Click Edit .
  5. Verify the fully qualified domain name is used in the Server field.
    Note:

    For the file share to be accessible off the local network, the server name/IP must be publicly routable.

  6. Click the HTTPS tab and do the following:
    1. Select Use HTTPS downloads.
    2. Enter an alias for the virtual directory that was created in IIS in the Context field.
    3. Choose "Username and Password" from the Authentication Type pop-up menu.
      Note:

      If you are planning on using your distribution point to distribute packages during enrollment, it must instead be configured as an HTTPS distribution point that does not require authentication (e.g., using a publicly-trusted certificate or username and password). Alternatively, you can also secure the download of the enrollment package from an external distribution server using a JSON Web Token (JWT) in Jamf Pro. This ensures that enrollment packages are downloaded securely to computers from external distribution servers. For more information, see JSON Web Token for Securing In-House Content in the Jamf Pro Documentation.

    4. Enter the username and password for the read-only account.
  7. Click Save.
  8. To test the HTTPS distribution, enter a URL similar to https://yourserver/Packages/ in your browser.
  9. When prompted, enter the credentials for the read-only account.
  10. Select a PKG and DMG file to download.
  11. Create a policy in Jamf Pro to distribute a package to a test computer.

    For more information, see Package Deployment in the Jamf Pro Documentation.