Tag Archives: DEP

Mac – JAMF manual agent installation

Sometimes, (in my case when using DEP enrollment on a slow wifi connection) the Jamf agent doesn’t get installed properly during DEP enrollment. To fix that here is what I did:

I first ran the following commands to manually download and “install” the Jamf binary from the Jamf server – All commands must be run as root! (“#” indicates a comment in script fashion not a command to run. Also be sure to replace “<Your JAMF Server>” with the address of your Jamf server)

# Get the jamf agent binary to the right location
mkdir /usr/local/jamf
mkdir /usr/local/jamf/bin
mkdir /usr/local/bin
curl https://<Your JAMF Server>/bin/jamf -o /tmp/jamf
mv /tmp/jamf /usr/local/jamf/bin/

# Set the binary to be executable
chmod +x /usr/local/jamf/bin/jamf

# Create a symbolic link for the binary so the “jamf” command is in the default path
ln -s /usr/local/jamf/bin/jamf /usr/local/bin/jamf

# Create the configuration file the jamf binary uses to find the server
/usr/local/bin/jamf createConf -url https://<Your JAMF Server>

# Re-enroll computer to get the server certificate
/usr/local/bin/jamf -enroll -prompt

Once the Jamf agent is installed, the computer was checking into the Jamf server. However I wasn’t able to scope it to policies because it was listed as “unmanaged”.  To change that, on the Jamf server I edited the computer’s “General” information tab by checking the box to set it to “Managed”and entering a local administrative username and password on the computer for Jamf to use to mange the computer. Also, since we use “Sites”, I manually set the site for the computer as well.

Now that the Jamf agent was installed and I set the computer record to “managed”, I was able to scope policies, etc to the computer as I normally do.

 

 

 

JAMF – DEP and VPP Certificate Renewal

For the JAMF server we have yearly renewing certificates that connect our JAMF server to Apple’s servers for our hardware (DEP) and software (VPP) purchases.

Here is how I did this process in May 2017:

  • 1) Log into our JAMF server ( https://casper.williams.edu:8443 ) with a full admin account
  • 2) Navigate to Management Settings – Global Settings – Device Enrollment Program
  • 3) Click on Public Key to download our JSS key to the local computer

    • 4

  • ) Sign into our Apple School Manager account at https://school.apple.com/ with our AppleID of: [email protected]
  • 5) Click on MDM – Upload Key
  • 6) Once uploaded you should be able to click on Get Token to download the new token
  • 7) Go back to our JAMF Server – Management Settings – Global Settings – Device Enrollment Program
  • 8) Click on Williams JSS and then Edit
  • 9) Then Upload Server Token

Remain logged into our JAMF server to update the VPP Certificate:

  • 1) Log into the [email protected] AppleId at the website: https://volume.itunes.apple.com/
  • 2) In the upper right corner click on [email protected] for a drop down menu, select Account Summary
  • 3) In the MDM section, click on Download Token
  • 4) While still logged into our JAMF Server navigate to Management

    • Settings – Global Settings – VPP Accounts

  • 5) Click on Williams VPP then Edit
  • 6) Finally click on “Renew Service Token” to upload the token you just downloaded from Apple

Phew. Done.
Log out of all accounts.