I feel like I'm going to lose my mind here, so I am going to need some help. I have a configuration profile to set up disk encryption upon first login. I am looking under inventory, and it says that the Filevault 2 partition is encrypted but FileVault 2 is not enabled. When I look at the mac it says it is encrypted, when I do fdesetup status in terminal it's encrypted and when I look at the different volumes the data partition is encrypted.

I read a post here a while back that said it's an issue with Mac that Apple is looking into so is that still the case or am I missing something?

Hey everyone,

I’m hitting a wall with a brand new MacBook Pro (M5 Pro chip) running macOS 26.4.1.
I’m wondering if anyone else is seeing issues with the initial management framework bootstrap on this hardware.

The Situation: The device goes through the Automated Device Enrollment (DEP) perfectly fine. The "Remote Management" screen appears, the user logs in, and the setup assistant completes.

The Problem: The device is in a "Zombie" state.

• profiles status -type enrollment says: Enrolled via DEP: Yes.
• In Jamf Pro, the device record is stuck as a "Placeholder" / Unmanaged.
• NO Jamf Binary: /usr/local/bin/jamf does not exist.
• No Self Service, no identity certificates in the Keychain.
• The "Allow Jamf Pro to perform management tasks" checkbox in the inventory is NOT checked.

What I’ve tried so far:

1. PreStage Tweaks: Verified account settings (Set to Administrator), tried with and without custom Enrollment Packages.
2. The Rosetta Clue: I tried pushing the Company Portal as an enrollment package. It triggered a Rosetta 2 installation prompt, which makes me think the initial bootstrap is timing out or failing because of some Intel-legacy dependency during the M5 bootstrap process.
3. Manual Nudges: Ran sudo mdmclient selfrequest mdm.InstallManagementFramework and sudo profiles renew -type enrollment. Commands return success, but no binary ever lands.
4. Network: Tested on a clean mobile hotspot to bypass VPN/Firewalls. Same result.
5. Wipe & Retry: Done this 5+ times with different PreStage configs.

My Questions:

• Has anyone encountered issues with the Jamf binary bootstrap on the M5 Pro silicon specifically?
• Is there a way to force-install the binary on macOS 26 when the MDM channel is open but the binary won't deploy?
• Is the current Jamf binary still reliant on Rosetta for the initial install on M5 chips?

I have a ticket open with my MSP/Jamf, but I’m under a massive time crunch to get this high-priority device deployed. Any insights would be life-saving.

#Jamf #macOS26 #M5Pro #DEP #SysadminLife

Hi,

New to JAMF Pro, and trying to come up with a workflow to allow users to self-install Adobe CC apps via Self Service. I've created installer packages for the needed apps via the Adobe admin console, uploaded to JAMF Pro and created policies to install each app, and made those policies available via self service.

This kind of works, but there are two main issues we're encountering.

Issue 1 - it seems we're seeing a lot of issues with the policy failing because the download of the pkg file from JAMF Pro fails:

Downloading https://mycompany.jamfcloud.com/jcds/downloads/Photoshop%2520for%2520JAMF_en_US_MACARM.pkg...
Error: Package was not successfully downloaded. -1005
The network connection was interrupted while downloading the package from https://mycompany.jamfcloud.com/jcds/downloads/Photoshop%2520for%2520JAMF_en_US_MACARM.pkg. Attempting to reconnect...
The network connection was interrupted while downloading the package from https://mycompany.jamfcloud.com/jcds/downloads/Photoshop%2520for%2520JAMF_en_US_MACARM.pkg. Attempting to reconnect...

This is on a test Mac at our office, which has a very fast and very reliable Internet connection, so I don't think the issue is on our end. If we run the policy several times it'll eventually work, but this will be confusing for end users who expect to click the install button and have it "just work".

Issue 2 - In testing, I frequently see the install process take 20+ minutes. I get that part of this is just the fact that Adobe apps take a long time to install, but I wish there was a way I could give the end user some sort of visual progress indicator while the app is installing so they see something other than a spinning icon in Self Service. We've seen users cancel the process because they think it's taking too long. Part of that is just a need for user education, but I was wondering if anyone has managed to wrap Adobe installers so it gives the user some sort of progress bar?

Context:
We are getting a pool of roughly 200 new devices/ year. The pool is supposed to supply students & teachers and have spare devices in case a device needs to be replaced or new students arrive.

Problem:

Student and faculty devices are supposed to be configured differently. But I can't find an option to make a smart group based merely on status "teacher". There is an option to make a smart group based on teachers of certain classes, but I would love a way to have a smart user/ device group just based on the binary teacher/ student differentiation.

I can't imagine that this is not a common scenario to roll out profiles just based on this, but I can't figure out how without manually updating a teacher's list.

I'd appreciate your input!

Hey there,

I am trying to use blueprints to update iPads in my fleet, but after they download the update it just fails to verify. They also strangely try to install 18.7.8 instead of 26.4.2 whenever using the "install latest update" option. The "ignore major updates" flag is turned off, so I don't understand why that would happen. Affected devices are all on various iPadOS 18 versions and are each 11 inch m3 airs. I am kind of at my wit's end with this to be honest. Has anybody had similar experiences with managed updates on iPads?

I have tried everything that I can from a google search.

I've used Configurator, on device enrolment, and various other things AI has suggested to me. (Don't judge lol, I am just a lowly elementary school teacher)

I can get it supervised, which will pump through all the apps I want, but it won't handshake with ASM so that it can be supervised.

Is it a lost cause?

Does anyone have your Jamf Pro instance set up so it pulls serial numbers and Asset Tag data (and Misc data) from ServiceNow or ABM so we don't need to manually enter it in the inventory preload sheet.

Any tips on managing inventory would be great. TIA!