Technical Articles

Technical Articles

Solution
Application
Content Type: Technical Documentation
Utilities & Services
ft:locale: en-US

Technical Articles
Jamf Pro Settings
Configuring Jamf Pro to Use Microsoft Graph API for SMTP
Creating an App Registration in Microsoft Entra Admin Center for Jamf Pro
Configuring Permissions in Exchange Admin Center
Using PowerShell to Create a New Service Principal
Data and Tables Affected by Log Flushing
Enabling Debug Mode
Enabling Debug Mode or Statement Logging in Jamf Pro
Method 1—Selecting Checkboxes in the logging.html File
Method 2—Edit the log4j2.xml File for Jamf Pro 10.31.0 or Later
Method 3—Edit the log4j.properties File for Jamf Pro 10.30.0 or Earlier
Viewing Debug Logs for Self Service on macOS
Getting More Information Using the jamf binary
Getting Additional Logging Information on Packages and Policies
Enabling Additional MDM Logging on macOS Clients
Viewing iOS Logs on macOS
Engage Overview and FAQ
Preparing a Google Workspace for Jamf Pro SMTP Integration
Sentry Crash Logging and Usage Analytics Integrations
Opting Out of Sentry
Enrollment
Configuring the Session Token Expiration for Account-Driven User Enrollment
Enrolled Devices Stop Communicating after 5 Years
Renewing a Device Identity Certificate
Renewing a Device Certificate
Re-enrolling Mobile Devices
Mobile Device Enrollment Error: "Invalid Profile" or "Invalid Certificate"
Replace the Web Server Certificate in Jamf Pro with the Certificate from the JSS's Built-in CA
Install a Public Certificate from a Third-party CA
Ensure that Users Install the CA Certificate During Enrollment
Prepare for Account-Driven Enrollment with Managed Apple Accounts and Service Discovery
Creating Managed Apple Accounts
Configuring Service Discovery
Defining Jamf Pro Enrollment Information for Account-Driven Enrollment
Hosting Jamf Pro Enrollment Information on Your Jamf Pro Server for Account-Driven Enrollment Using the Jamf Pro API
Testing Your Service Discovery Configuration Using the Jamf Pro API
Verifying Your Service Discovery Configuration on a Device
Testing Your Service Discovery Configuration Using Curl
Advanced Service Discovery Configuration for Multiple Enrollment Types
Hosting Jamf Pro Enrollment Information on Your Own Web Server for Account-Driven Enrollment
Configuring Access Management for Managed Apple Accounts in the Jamf Pro API
Re-enrolling a Computer or Mobile Device with Jamf Pro After the MDM Profile Has Expired
Re-enrolling a Computer with a Removable MDM Profile
Re-enrolling a Computer with an Unremovable MDM Profile
Re-enrolling a Mobile Device with a Removable MDM Profile
Re-enrolling a Mobile Device with an Unremovable MDM Profile
Redeploying the Jamf Management Framework Using the Jamf Pro API
Migrating from Jamf Now to Jamf Pro
Basic Setup of Jamf Pro
Migrating Computers to Jamf Pro
Migrating Computers Enrolled via Automated Device Enrollment
Migrating Computers Enrolled via Open Enrollment
Migrating Mobile Devices to Jamf Pro
Migrating Mobile Devices Enrolled via Automated Device Enrollment
Migrating Mobile Devices Enrolled via Open Enrollment
Migrating Apps Purchased in Volume to Jamf Pro
Migrating Apps Purchased in Volume with Apple Business
Migrating Apps Purchased in Volume with Apple School Manager
Migrating iOS and iPadOS Devices from Another MDM Server to Jamf Pro
Device Management
Apple Beta Software Program
Signing Up for an Apple Beta Software Program
Utilizing the Feedback Feature
Best Practices to Provide Apple Beta Software Program Feedback
Apple Account Sign-In
Apple Vision Pro Management with Jamf Pro
Management Capabilities for Apple Vision Pro
Configuring Jamf Pro to use an HTTP Proxy Server for Communications with Automated Device Enrollment and Volume Purchasing
Configuring Jamf Pro to use HTTP Proxy Server Settings Contained in the Jamfsoftware Database
Configuring Jamf Pro to Use HTTP Proxy Server Settings Contained in the JVM Properties
Linux
Windows
Deploying Custom Computer Configuration Profiles Using the Application & Custom Settings Payload
Disabling Data Syncing between Mac Computers and Mobile Apple Devices
Entity Equivalents for Disallowed XML Characters
Erase Device Command Options in the Jamf Pro API
Obliteration Behavior (Jamf Pro API)
General Requirements for Obliteration Behavior
Keys for Obliteration Behavior
Return to Service (Jamf Pro API)
General Requirements for Return to Service
Keys for Return to Service
Creating a Mobile Device Configuration Profile with a Wi-Fi Payload for Return to Service
Creating a Return to Service Configuration
Jamf Pro Security Recommendations
Jamf Pro Server Settings
Content Distribution
Managed Devices
On-Premise-Specific Settings
Leveraging Apple’s Activation Lock Feature with Jamf Pro
Allowing User-Based Activation Lock
Enabling Organization-Based Activation Lock for Mobile Devices
Disabling Organization-Based Activation Lock for Mobile Devices
Viewing Activation Lock Information
Determining if Activation Lock is Enabled
Clearing Activation Lock
Managing User Approved MDM with Jamf Pro
General Requirements
Methods to Achieve a User Approved MDM Status
Notifying Users in Self Service and in Notification Center
Reporting Capabilities in Jamf Pro
Jamf Pro Handling of Profiles that Require User Approved MDM
Troubleshooting
Managing Legacy Kernel Extensions in macOS Using Jamf Pro
General Requirements
Approving Kernel Extensions Using a Configuration Profile
Restarting Computers using MDM Restart with Kernel Cache Rebuild
Restarting Computers using the Jamf Pro API
Obtaining the Management ID
Sending the RestartDevice MDM command
Leveraging Apple's Bootstrap Token Functionality
Automatic Bootstrap Token Escrow with Jamf Pro
Manually Creating and Escrowing the Bootstrap Token
Verifying Jamf Pro Has Escrowed a Bootstrap Token
Additional Information
Preparing Your Organization for User Data Protections on macOS 10.14
New User Data Protections in macOS 10.14 or Later
Pre-Approval of the Jamf Management Framework
Pre-Approval of Apple Events
Additional Information
PreStage Enrollment: Users Are Not Volume Owners on Computers with macOS 11.5–12 when the Recovery Lock Password is Set During Enrollment (PI-010304)
Identifying Computers Without Volume Owners Using an Extension Attribute
Identifying Computers Without Volume Owners Using Terminal
Erasing and Re-installing macOS in Preparation to Enable Volume Owners
Recovery Lock Enablement in macOS Using the Jamf Pro API
Obtaining the Computer ID
Obtaining the Management ID
Sending the Set Recovery Lock MDM Command
Resetting Transparency Consent and Control Prompts on macOS
Troubleshooting Managed Software Updates in Jamf Pro
Resetting Managed Software Updates
Viewing Plan Details
Field Definitions
State Definitions
Error Reason Definitions
Viewing the Event Store
Event Definitions
Using Markdown to Format Text
Supported Markdown Formatting
Inventory and Reporting
Collecting the IP Address and Reported IP Address in Jamf Pro
Inventory Field Updates
Network Segment Calculations
Complying with GDPR Requests in Jamf Pro
Other Considerations
GDPR Compliance Reference for Jamf Pro
Integrating Jamf Pro with Microsoft Copilot for Security
Integrating with Apple's Global Service Exchange (GSX)
General Requirements
Creating a GSX Account
Obtaining an Apple Certificate
Generating a CSR
Sending the CSR and GSX Account Information to Apple
Converting the Apple Certificate (.pem) to .p12 Format
Configuring the GSX Connection in Jamf Pro
Additional Information
Jamf Pro Reporting Capabilities for Apple's macOS Security Features
Using Regex with Smart Groups and Advanced Searches
Common Regex Patterns
Regex Examples and Search Logic
Content Distribution
Cannot Validate a Managed In-House App
Configuration Profiles for Additional App Installers Settings
Configuring End User Notifications for App Installers with Configuration Profiles
Bundle IDs and Preference Domains for App Installers
Preference Keys for App Installers
Disabling Developer Auto-Updates for App Installers with Configuration Profiles
Preference Domains and PLISTs for App Installers
Configuring and Deploying the iboss cloud Enterprise App using Jamf Pro
General Requirements
Adding the iboss cloud Enterprise app to Jamf Pro
Adding the Mobile Device Configuration to Jamf Pro
(Recommended Method) Importing the Default Mobile Device Configuration from iboss cloud to Jamf Pro
Manually Creating the Mobile Device Configuration Profile in Jamf Pro
Testing the iboss Configuration
Deploying the McAfee ePO Agent Using Jamf Pro
Obtaining the Necessary McAfee Components
Building a Package of the McAfee Components
Adding the Package to Jamf Pro
Deploying the McAfee Components and the Installation Script
Integrating Amazon Web Services (AWS) with Jamf Pro
General Requirements
Setting Up AWS
Configuring AWS as a Distribution Point in Jamf Pro
Additional Information
Maintaining Deprecated Patch Management Software Titles with Title Editor
Moving from User- to Device-based Volume Purchasing Assignments
General Requirements
Verifying that Apps are Device-Assignable
Turning off Notifications
Revoking Apps from Users
Assigning Apps to Devices
Troubleshooting the Pending App Installation Status
Assess Additional App License Purchasing and Verify License States
Viewing Pending App Used Licenses
Performing Simple or Advanced Volume Content Searches for Pending Apps
Checking Device in Scope of Paid App and License Assigned via User-assigned Volume Assignment
Volume Purchasing Internal Error Code 9603
Confirming Error 9603 at Server Level
Re-syncing Licenses for Impacted Devices
Distribution Points
Configuring Red Hat Enterprise Linux for SMB/HTTPS File Share Distribution with Jamf Pro
Setting Up SMB on Jamf Pro Using Red Hat Enterprise Linux
Setting Up an HTTP Distribution Point on Jamf Pro
Information Required to Configure a Cloud Distribution Point in Jamf Pro
Setting Up a File Share Distribution Point
Setting Up a File Share Distribution Point on macOS
Setting Up a SMB File Share Distribution Point on Windows
Using Apache HTTP Server to Enable HTTP Downloads on a Linux File Share Distribution Point
Using IIS to Enable HTTPS Downloads on a Windows Server 2016 or 2019 File Share Distribution Point
General Requirements
Creating an SMB File Share Distribution Point for Windows Server 2019
Creating Local User Accounts
Creating a Folder as a File Share
Adding the Web Server (IIS) Role
Creating a Certificate Signing Request
Installing the Server Certificate to the Windows Certificate Store
Adding MIME Types to the Virtual Directory
Configuring Bindings Using the IIS Manager Console
Enabling and Testing HTTPS Downloads in Jamf Pro
Certificates
Supporting Microsoft Active Directory Strong Certificate Mapping Requirements
Integrating Jamf Pro with Cisco ISE 3.3
Jamf Pro
Cisco ISE
Obtaining a SCEP Proxy Signing Certificate from a Microsoft CA Using Command Prompt and Uploading the Certificate to Jamf Pro
General Requirements
Generating a Certificate Signing Request
Downloading the Certificate from the Microsoft CA Server
Uploading the Certificate to Jamf Pro
Obtaining a SCEP Proxy Signing Certificate from a Microsoft CA Using MMC and Uploading the Certificate to Jamf Pro
General Requirements
Configuring an External CA in Jamf Pro
Generating a Certificate Signing Request
Uploading the Certificate to Jamf Pro
Creating a Configuration Profile with a SCEP Payload
Obtaining a SCEP Proxy Signing Certificate from a Microsoft CA Using OpenSSL and Uploading the Certificate to Jamf Pro
General Requirements
Step 1: Generating a Certificate Signing Request
Step 2: Downloading the Certificate from the Microsoft CA Server
Method 1: Your organization has web enrollment enabled
Method 2: Your organization does not have web enrollment enabled
Step 3: Uploading the Certificate to Jamf Pro
Obtaining a SCEP Proxy Signing Certificate from a Microsoft CA Using Terminal and Uploading the Certificate to Jamf Pro
General Requirements
Generating a Certificate Signing Request
Downloading the Certificate from the Microsoft CA Server
Uploading the Certificate to Jamf Pro
Obtaining an Installer Certificate from Apple
Additional Information
Creating a Signing Certificate Using Jamf Pro's Built-in CA to Use for Signing Configuration Profiles and Packages
Creating a Signing Certificate Using the Jamf Pro Built-in CA
Installing the Certificate to Use for Signing Purposes
Signing a Custom Configuration Profile with the Installed Certificate
Signing a Custom Package File with the Installed Certificate
Additional Information
Identity and Access Integrations
Single Sign-On Options for Jamf Pro FAQ
Understanding SSO Authentication Methods for Jamf Platform Services
Jamf Pro SAML Authentication Flow
Domain Verification and Application Registration
Jamf Pro Authentication with OIDC-based Single Sign-On through Jamf Account
Access for Platform Services in Jamf Pro
Logout Scenarios
Further Considerations
Configuring Custom Claim Mapping for OIDC-based SSO with Jamf Account
Configuring Custom Claim Mapping for SSO with Entra ID and Jamf Account
Configuring Custom Claim Mappings for Okta or Generic OIDC Providers
Transitioning Jamf Pro SSO for Administrators from SAML-Based SSO to OIDC-Based SSO in Jamf Account
General Requirements
Planning Your Transition
Implementing OIDC-Based SSO with Jamf Account
Finalizing the Transition
SAML-Based SSO Integrations
Configuring SAML-Based Single Sign-On with Okta
General Requirements
Adding an Application for the Jamf Pro Server in Okta
Creating an Application for Jamf Pro Using the Pre-Configured Application
Manually Adding a SAML 2.0 Application for Jamf Pro
Copying Metadata from Okta
(Optional) Enabling Single Logout
Additional Information
Configuring SAML-Based Single Sign-On with Active Directory Federation Services
General Requirements
Adding Relying Party Trust in AD FS
(Optional) Adding Jamf Pro Built-in Root Certificate to Trusted Certificates
(Optional) Setting the SSO Lifetime Value in AD FS
Additional Information
Configuring SAML-Based Single Sign-On with Shibboleth
General Requirements
Obtaining the Metadata XML File from Shibboleth
Enabling Single Sign-On in Jamf Pro
Adding a New Relying Party to Shibboleth Identity Provider
Configuring Shibboleth Identity Provider SAML Attributes
Testing the Shibboleth Identity Provider SSO Configuration
Configuring SAML-Based Single Sign-On with OneLogin
General Requirements
Adding a New Application for Jamf Pro in OneLogin
Adding a New Application for Jamf Pro in a Jamf Cloud-Hosted Environment
Adding a New Application for Jamf Pro in an On-Premise Environment
Saving the Metadata file or URL from OneLogin
Additional Information
Configuring SAML-Based Single Sign-On with PingOne
General Requirements
Creating a New Application in PingOne
Enabling Single Sign-On in Jamf Pro
Continuing SAML App Configuration in PingOne
Additional Information
Configuring SAML-Based Single Sign-On with Google Workspace
Additional Information
Configuring Single Sign-On with Centrify
Platform Single Sign-on for macOS with Jamf Pro
Deploying macOS Platform SSO for Microsoft Entra ID with Jamf Pro
Requirements for Platform SSO with Microsoft Entra ID
Determining the Authentication Method
Deploying the Company Portal App from Microsoft to End Users
Downloading the Company Portal App from Microsoft
Uploading the Company Portal App to Jamf Pro as a Package
Identifying Mac Computers Without the Company Portal App Installed
Deploying the Company Portal App to Mac Computers
Deploying a Platform Single Sign-on Configuration Profile
Deploying macOS Platform SSO for Okta with Jamf Pro
Requirements for Platform SSO with Okta
Deploying the Okta Verify App to End Users
Uploading the Okta Verify App to Jamf Pro as a Package
Identifying Computers Without the Okta Verify App Installed
Deploying the Okta Verify App to Computers
Deploying an App Configuration for Okta Verify
Deploying a Platform Single Sign-on Extensions Configuration Profile
Deploying a SCEP Profile
Deploying the Kerberos Single Sign-on Extension with Jamf Pro
Configuring Cloud Identity Provider Attribute Mappings Using the Jamf Pro API
General Requirements
Obtaining the List of Configured Cloud Identity Provider Instances
Obtaining the Current Attribute Mappings Configuration for a Given Instance
Updating the Attribute Mapping Configurations for a Specific Instance
Additional Information
Configuring Okta Classic Engine and Jamf Pro for Mobile Device Trust
General Requirements
Enable Mobile Device Trust in Okta for Jamf Pro
Configure managed app settings in Jamf Pro for Okta Mobile
Generating a PKCS12 (.p12) Keystore File from a Google Cloud LDAP Client
Additional Information
LDAP Server Connections in Jamf Pro
LDAP Connections
LDAP over SSL Connections
LDAP Server Proxy Connections
Configuring Jamf Pro to Use SSL
Common LDAP Connection Issues
Server Name Does Not Match the Name on the Certificate
Invalid Certificate Trust Chain
No CA Certificate, Expired CA Certificate, Not yet Valid CA Certificate, or Revoked CA Certificate
Certificate is Not in the DER or PEM Format
LDAP Attribute Mappings Reference
User Mappings
User Group Mappings
User Group Membership Mappings
Additional Information
Troubleshooting LDAP Connections to Active Directory
Troubleshooting Using Apache Directory Studio
Troubleshooting a Failed Connection
Finding the DN or Username for the Bind User
Troubleshooting Failed Authentication with the Bind DN or Username
Microsoft Intune Permissions Changes
General Requirements
Updating a Cloud Connector Integration
Updating a Manual Integration
Additional Information
Cloud-Hosted Environments
Jamf Cloud Overview and FAQ
Jamf Premium Cloud Prerequisites
Jamf Cloud Hosted Data Region Information
Custom Domain Certificate Validation
Jamf Cloud Distribution Service Communication
Network Infrastructure
IPv6 Compatibility in Jamf Pro
Network Ports Used by Jamf Pro
On-Premise Installation and Upgrades
Apache Tomcat Versions Installed by the Jamf Pro Installer
Apache Tomcat and Jamf Pro Version List
Configuring MySQL 8.0 for Jamf Pro
Setting the --log-bin Option for Replication or Point-in-Time Recovery
Setting the default authentication plug-in to mysql_native_password or Legacy Password Encryption method
Configuring the JAVA_HOME and JRE_HOME Environment Variables on a Windows Server
Disabling TLS 1.0 and 1.1 in Java
Disabling TLS 1.0 and 1.1 in Java for Jamf Pro
Disabling TLS 1.0 and 1.1 in Java for Your Entire Environment
Enabling HSTS for Jamf Pro
Method 1: Enabling HSTS When Upgrading Using the Installer
Method 2: Enabling HSTS When Manually Upgrading or When Not Upgrading
Incremental Upgrade Scenarios for Jamf Pro 10.0.0 or Later
Installing a Jamf Pro Web Application in the DMZ
Using the Existing Certificate Keystore File with the External DMZ Jamf Pro Web Application
Installing Java and MySQL for Jamf Pro 10.14.0 or Later
Installing Java and MySQL on Red Hat Enterprise Linux for Jamf Pro 10.14.0 or Later
General Requirements
Installing Red Hat OpenJDK 21 or Red Hat OpenJDK 11 on Red Hat Enterprise Linux
Installing MySQL Community Server 8.0 on Red Hat Enterprise Linux
Installing Java and MySQL on Ubuntu for Jamf Pro 10.14.0 or Later
General Requirements
Installing Debian OpenJDK 21 or Debian OpenJDK 11 on Ubuntu
Installing MySQL Community Server 8.0 on Ubuntu
Installing Java and MySQL on Windows for Jamf Pro 10.14.0 or Later
General Requirements
Installing Amazon Corretto 21 or Amazon Corretto 11 on Windows
Installing MySQL Community Server 8.0 on Windows
Migrating to Java 11
Migrating to Java 11 on Jamf Pro Servers
Stopping Tomcat
Uninstalling Java 8
Uninstalling Java 8 on Red Hat Enterprise Linux
Uninstalling Java 8 on Ubuntu
Uninstalling Java 8 on Windows
Uninstalling Java 8 on macOS
Installing Java 11
Upgrading Jamf Pro
Additional Information
Migrating to Java 11 on Jamf Infrastructure Manager Servers
Stopping the Jamf Infrastructure Manager Service
Uninstalling Java 8
Uninstalling Java 8 on Red Hat Enterprise Linux
Uninstalling Java 8 on Ubuntu
Uninstalling Java 8 on Windows
Installing Java 11
Updating the Jamf Infrastructure Manager Service
Migrating to Java 17 on Jamf Infrastructure Manager Servers
Stopping the Jamf Infrastructure Manager Service
Uninstalling Java 11
Uninstalling Java 11 on Red Hat Enterprise Linux
Uninstalling Java 11 on Ubuntu
Uninstalling Java 11 on Windows
Installing Java 17
Installing Red Hat build of OpenJDK 17 on Red Hat Enterprise Linux
Installing Debian OpenJDK 17 on Ubuntu
Installing Amazon Corretto (OpenJDK) 17 on Windows
Updating the Jamf Infrastructure Manager Service
Migrating to Java 21 on Jamf Pro Servers
Stopping Tomcat
Uninstalling Java 11
Uninstalling Java 11 on Red Hat Enterprise Linux
Uninstalling Java 11 on Ubuntu
Uninstalling Java 11 on Windows
Installing Java 21
Upgrading Jamf Pro
Preparing to Upgrade Jamf Pro
Reading the Release Notes
Deploying in a Test Environment First
Cleaning Up the Database
Backing Up the Database
Additional Information
Reverting to a Previous Version of Jamf Pro after a Failed Upgrade
Reverting to a Previous Version of Jamf Pro after a Failed Upgrade on Linux
Reverting to a Previous Version of Jamf Pro after a Failed Upgrade on Windows
Reverting to a Previous Version of Jamf Pro after a Failed Upgrade on macOS
Troubleshooting "Jamf Pro Startup Suspended" Issues
Upgrading Jamf Pro in a Clustered Environment
Upgrading to MySQL 8.0
Upgrading to MySQL 8.0 on Red Hat Enterprise Linux
General Requirements
Preparing to Upgrade
Stopping Tomcat
Backing Up the Database
Backing Up the Database Configuration File
Recording Database Settings
Recording Database Settings Using the Jamf Pro Server Tools GUI
Recording Database Settings Using the Jamf Pro Server Tools CLI
Uninstalling MySQL
Installing MySQL 8.0
Configuring the Database
Restoring Database Settings and Custom Settings
Restoring Database Settings Using the Jamf Pro Server Tools GUI
Restoring Database Settings Using the Jamf Pro Server Tools CLI
Restoring the Database
Disabling Bin Logging
Re-enabling Scheduled Database Backups
Backing Up the Database
Additional Information
Upgrading to MySQL 8.0 on Ubuntu
General Requirements
Preparing to Upgrade
Stopping Tomcat
Backing Up the Database
Backing Up the Database Configuration File
Recording Database Settings
Recording Database Settings Using the Jamf Pro Server Tools GUI
Recording Database Settings Using the Jamf Pro Server Tools CLI
Uninstalling MySQL
Installing MySQL 8.0
Configuring the Database
Restoring Database Settings and Custom Settings
Restoring Database Settings Using the Jamf Pro Server Tools GUI
Restoring Database Settings Using the Jamf Pro Server Tools CLI
Restoring the Database
Disabling Bin Logging
Re-enabling Scheduled Database Backups
Backing Up the Database
Additional Information
Upgrading to MySQL 8.0 on Windows
General Requirements
Preparing to Upgrade
Stopping Tomcat
Backing Up the Database
Backing Up the Database Configuration File
Recording Database Settings
Recording Database Settings Using the Jamf Pro Server Tools GUI
Recording Database Settings Using the Jamf Pro Server Tools CLI
Uninstalling MySQL
Installing MySQL 8.0
Configuring the Database
Restoring Database Settings and Custom Settings
Restoring Database Settings Using the Jamf Pro Server Tools GUI
Restoring Database Settings Using the Jamf Pro Server Tools CLI
Restoring the Database
Disabling Bin Logging
Re-enabling Scheduled Database Backups
Backing Up the Database
Additional Information
Upgrading to MySQL 8.0 on macOS
General Requirements
Preparing to Upgrade
Backing Up the Database
Backing Up the Database Configuration File
Recording Database Settings
Restoring Database Settings Using the Jamf Pro Server Tools GUI
Restoring Database Settings Using the Jamf Pro Server Tools CLI
Uninstalling MySQL
Installing MySQL 8.0
Configuring the Database
Restoring Database Settings and Custom Settings
Restoring Database Settings Using the Jamf Pro Server Tools GUI
Restoring Database Settings Using the Jamf Pro Server Tools CLI
Restoring the Database
Disabling Bin Logging
Re-enabling Scheduled Database Backups
Backing Up the Database
Additional Information
On-Premise Server
Changing Specific Accounts in Jamf Pro and the MySQL Database
Accounts That Can Be Changed in Jamf Pro
Changing the Password for the MySQL Account Used by Jamf Pro
Stopping Jamf Pro Using the Jamf Pro Server Tools Command-line Interface
Changing the Jamf Pro MySQL Account Password
Updating the Connection Details with the New Password
Starting Jamf Pro
Configuring the Jamf Pro Server Session Timeout
Configuring the Variable in the Jamf session.properties File
Enabling SSL on Tomcat with a Public Certificate
General Requirements
Creating a Public Certificate for Your Jamf Pro Server
Creating the Certificate Using OpenSSL
Creating the Certificate Using Java Keytool
Importing the Certificate Into Jamf Pro
Importing the Certificate Using the Tomcat Assistant
Importing the Certificate by Manually Editing the server.xml File
Granting Read-Only Access to the JAMF Software Server MySQL Database
Hosting In-House Books and Apps on a Tomcat Instance
Additional Information
Manually Creating the Jamf Pro Database
General Requirements
Configuring MySQL 8.0 for Jamf Pro
Connecting to MySQL
Understanding MySQL Passwords
Creating the Jamf Pro Database
Creating the Jamf Pro Database User
Granting Access to the Database
Exiting MySQL
Configuring MySQL
Restarting MySQL
Stopping Tomcat
Configuring the Connection Between Jamf Pro and the Database
Starting Tomcat and Accessing Jamf Pro (new Jamf Pro installations only)
Manually Editing the Database Connection
Memcached Installation and Configuration for Jamf Pro Environments
Recommended Versions of Memcached
Securing Memcached
Installing and Configuring Memcached on a Linux Server
Installing and Configuring Memcached on Red Hat Enterprise Linux
Installing and Configuring Memcached on Ubuntu
Enabling Memcached
Additional Information
Migrating to Another Server
Migration Methods
General Requirements
Method 1: Migration only–no upgrades necessary
Method 2: Migrate to new server, then upgrade software
Method 3: Upgrade software, then migrate to the new server
Copying the Certificate Keystore File to the New Server
Primary and Secondary Web Application Responsibilities
Restoring Backups of the Tomcat Directory
Starting and Stopping Tomcat
General Requirements
Restarting Tomcat Using the Jamf Pro Server Tools GUI
Restarting Tomcat Using the Jamf Pro Server Tools CLI
Restarting Tomcat Using the System Service Command Line
Restarting Tomcat on Linux
Restarting Tomcat on Windows
Supporting Apple Push Notification Service (APNs) Over HTTP/2
HTTP/2 Protocol Ports
Enabling the HTTP/2 Protocol in Jamf Pro
Troubleshooting Communication with APNs Over HTTP/2
Troubleshooting Caching Configuration
White Screen During Jamf Pro Startup with Errors in the JAMFSoftwareServer.log
Cache Configuration Errors
Ehcache Configuration Errors
Memcached Configuration Errors
Troubleshooting Database Connectivity from the Jamf Pro Server
The Database Connection Details are Not Configured
MySQL is Not Running on the Database Server
The DataBase.xml File Contains Invalid MySQL Server Location Details
The Database Server is Not Accepting Incoming Connections
The DataBase.xml File Contains Invalid MySQL User Credentials
The Database User is Not Granted Proper Privileges to the Database
The Database User Password Authentication Plug-In is Not Properly Configured
Using OpenSSL to Create a Certificate Keystore for Tomcat
Jamf Pro Server Tools
Backing Up and Restoring the Database Using the Jamf Pro Server Tools Command-Line Interface
General Requirements
Backing Up the Jamf Pro Database
Restoring the Jamf Pro Database
Scheduling Database Backups
Time Formats
Stopping Scheduled Database Backups
Viewing Scheduled Backups
Backing Up the Database Using Jamf Pro Server Tools
Creating a Database Backup
Scheduling Database Backups
Stopping Scheduled Database Backups
Converting the MySQL Database Storage Engine from MyISAM to InnoDB Using the Jamf Pro Server Tools Command-Line Interface
General Requirements
Ensuring You Have the Latest Version of the Jamf Pro Server Tools CLI
Methods to Download Install Jamf Pro Server Tools CLI
Confirming Database Information
Configuring the Jamf Pro Server Tools CLI
Configuring InnoDB Settings
Stopping Tomcat on the Jamf Pro Server
Backing Up the Database
Converting the Database to InnoDB
Getting Help and Troubleshooting
Creating the Jamf Pro Database Using the Jamf Pro Server Tools Command-Line Interface
General Requirements
Verifying the Jamf Pro Server Tools CLI Version
Creating the Jamf Pro Database and MySQL User Account
Configuring MySQL
Verifying Settings
Restarting the Services
Accessing Jamf Pro
Editing the Database Connection Using Jamf Pro Server Tools
General Requirements
Editing the Database Connection Using Jamf Pro Server Tools GUI
Editing the Database Connection Using the Jamf Pro Server Tools CLI
Jamf Pro Server Tools Overview
Jamf Pro Server Tools Requirements
Installing the Jamf Pro Server Tools GUI
Opening the Jamf Pro Server Tools GUI
Jamf Pro Server Tools Settings
Restoring Database Backups Using Jamf Pro Server Tools
The Jamf Pro Server Tools Command-Line Interface
Installing the CLI
General Requirements
Jamf Pro Installers (Jamf Pro 10.7.0 or later)
Downloading the CLI Using a Package Manager
Downloading the CLI Using a Command Line
Downloading the CLI from Jamf Account
Downloading the CLI Using a Browser
Getting Help with the CLI
Configuring the CLI
Starting, Stopping, and Restarting the Jamf Pro Server
Starting, Stopping, and Restarting MySQL
CLI Logging and Debugging
Configuring the CLI for Database Backups
Other
Finding the Name of Processes When Configuring Restricted Software
Additional Information
Configuring Local Account Role Assignment between Jamf Connect and Entra ID
Configuring App Roles in Microsoft Entra ID
Assigning Users to Jamf Connect App Roles
Configuring Role-based Account Creation in Jamf Connect
Creating a Custom Scope for Jamf Connect and Conditional Access Policies
Creating an App Registration with a Custom API
Configuring Scope for Jamf Connect Deployment File
Creating an App Registration Using a New API Permission
Exempting the Jamf Connect ROPG application from Conditional Access policies applied to "All cloud apps"
Removing Conditional Access Policies Applied to All Cloud Apps
Creating a Jamf Connect Configuration Profile
Remediating a Jamf Protect System Extension Reinstall Loop
Jamf Trust Configuration Changes for iOS 15.6 and Later
Step 1: Checking the Safari Domains in Your Configuration Profile
Step 2: Entering New Rules in RADAR
Jamf Pro External Patch Source Endpoints
Requirements
Objects
Examples
Further Considerations
Additional Information

Featured Articles

Understanding SSO Authentication Methods for Jamf Platform Services
Single Sign-On Options for Jamf Pro FAQ
Transitioning Jamf Pro SSO for Administrators from SAML-Based SSO to OIDC-Based SSO in Jamf Account
Redeploying the Jamf Management Framework Using the API
Preparing a Google Workspace for SMTP Integration
Troubleshooting Managed Software Updates in Jamf Pro
Prepare for Account-Driven Enrollment with Managed Apple Accounts and Service Discovery
Memcached Installation and Configuration for Environments

Most Popular Articles

Network Ports Used by Jamf Pro
Creating a Signing Certificate Using Jamf Pro's Built-in CA to Use for Signing Configuration Profiles and Packages
Deploying macOS Platform SSO for Microsoft Entra ID with Jamf Pro
Leveraging Apple’s Activation Lock Feature with Jamf Pro
Leveraging Apple's Bootstrap Token Functionality
Configuring Jamf Pro to Use Microsoft Graph API for SMTP
Incremental Upgrade Scenarios for 10.0.0 or Later
Installing Java and MySQL for Jamf Pro 10.14.0 or Later

Back to home page