In these workflows, an MDM profile is installed first, and afterwards Jamf Pro automatically installs the Jamf Management Framework using an MDM command.

This includes Automated Device Enrollment or user-initiated enrollment.

It is recommended to use an MDM-first enrollment workflow.

This allows for policy communication but does not enable MDM communication, preventing configuration profiles and remote commands from working.Ī CA certificate is no longer downloaded and installed when performing enrollment using a QuickAdd package. It is recommended to install and trust the CA certificate to the Jamf Pro built-in CA before installing the QuickAdd package. Installing a QuickAdd package on computers with macOS 11 or later attempts to install the Jamf Management Framework. Every application, font, plug-in and computer on the network communicates with, and is documented to, the JAMF Software Server (JSS). In previous versions of macOS, the Jamf Management Framework and QuickAdd package-based enrollment would use this framework to install the MDM profile. Recon Suite provides a simple, low-cost way to inventory your network devices and computers, including Macs, Windows machines and iOS devices. To randomly generate a management account password, choose 'Randomly generate password' from the Method for Setting Password pop-up menu. This account is used as the management account. Enter credentials for a local administrator account. Check inventory record for computer and see Profiles. Open Recon and authenticate to the Jamf Pro server. MacOS 11 or later does not permit the automated installation of configuration profiles using the profiles binary. Type sudo Jamf recon -saveFormTo /Desktop/noProfilesInstalled in Terminal. Due to security changes in macOS, enrolling computers with macOS 11 or later in Jamf using Recon is not supported.

What is jamf recon