Apple Changes & Release Notes

Change Request 361211 Jamf Pro - Updating Elastic Deployment Script - Agent Version.

Description: Details of maintenance: Update the script used to deploy and update Elastic in our Jamf servers. We will update the installed version to the latest Elastic Stack version set by IT Security (8.19.3)

Benefit of change: This change updates the deployment script for Elastic to stay up to date with the latest Elastic Stack set by IT Security. This will update enrolled devices to the latest version and new enrolled devices will start out on the latest set version.

Impact to customers: None. Happens in the background.

Change Request 352259 Jamf Pro - macOS 26 Block.

Description: Details of maintenance: Globally block macOS 26 ahead of the 09/15/2025 release date through a configuration profile called "Global - Major macOS Upgrade Deferral". This configuration profile will block all major OS updates, but through a smart group exclusion, devices that have opted in for the upgrade or are not macOS 26 eligible will be able to upgrade their computers to the latest major OS.

Devices that decide to opt-in to the macOS 26 update, will get the "Global - Major macOS Upgrade Allowed" configuration profile. To opt-in, devices can be added to the static group "Allow Major macOS update - Static". Computers can also be manually added by updating the Extension Attribute menu: "Major OS Update" which can be found in Jamf Pro > Computers > Search for device > Computer Inventory > Operating System > Edit in the top right of Operating System List > Choose: Enable > Save changes in the top right. Selecting Delay instead of Enable will add them to the exclusion group of the allowed profile.

If requested for a more major addition of devices, a ticket will have to be submitted.

Benefit of change: This change will block macOS 26 so IT Staff can test software that is commonly used in their units before giving end users the ability to install the new update.

Impact to customers: macOS 26 will not be able to be downloaded but no visible impact to the customer.

Change Request 315869 Jamf Pro - Upgrading Jamf Pro from 11.18.1 to 11.19.1.

Description: Details of maintenance: The Jamf Pro server in both test and production servers will be upgraded from 11.18.1 to 11.19.1

Benefit of change: Jamf Pro 11.19.1 includes Tomcat 10.1.43 and fixes known security issues and bugs. List of changes: https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-11.19.1/page/New_Features_and_Enhancements.html This change will allow us to test SecureW2, fix bugs, and patch known security issues. CVE's:

[PI136944] [PI138128] Fixed: A known vulnerability in a third-party library (CVE-2025-48976).

[PI138965] [PI138090] Fixed: A known vulnerability in a third-party library (CVE-2025-5878).

Impact to customers: Jamf Pro console access and device enrollment capabilities for IT support teams may not be available during the upgrade.

Change Request 309578 Jamf Pro - Updating Elastic Deployment Script - Agent Version.

Description: Details of maintenance: Update the script used to deploy and update Elastic in our Jamf servers. We will update the installed version to the latest Elastic Stack version set by IT Security (8.18.4)

Benefit of change: This change updates the deployment script for Elastic to stay up to date with the latest Elastic Stack set by IT Security. This will update enrolled devices to the latest version and new enrolled devices will start out on the latest set version.

Impact to customers: None. Happens in the background.

Change Request 279779 Jamf Pro - Upgrading Jamf Pro from 11.16 to 11.18.1.

Description: Details of maintenance: The Jamf Pro server in both test and production servers will be upgraded from 11.6 to 11.18.1

Benefit of change: Upgraded Jamf Support ticketing system, Jamf Pro no longer returns a "Version entered is unknown" error when attempting to execute an advanced search or save a smart computer group that uses 'unknown version' as a value for existing patch reporting criteria, and fixes a security issue with the Jamf Pro Server. https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-11.18.1/page/New_Features_and_Enhancements.html

Impact to customers: Jamf Pro console access and device enrollment capabilities for IT support teams may not be available during the upgrade.

Change Request 265098 Intune/SCCM Co-Management settings no longer assigned.

Description: Change Description: An emergency change was implemented to reassign the Intune Enrollment Co-management settings after it was discovered that they were no longer assigned to any device group. This reassignment was necessary to resolve an issue reported by Jon, where SCCM agents were failing to install on OAL Self-Driven Autopilot enrolled devices.

Root Cause and Initial Fix

Root Cause: The Intune Co-management settings had lost their assignments, which prevented proper SCCM agent deployment during Autopilot.

Initial Emergency Action: The Co-management settings were assigned to the device scope group for all Autopilot enrolled devices.

Immediate Outcome: This resolved the issue for OAL Self-Driven devices, as confirmed by Jon.

Change Request 230394 Jamf Pro - Executive Support Site Creation.

Description: ## Details of Maintenance We will be creating a new Prestage, automated device enrollment, and site for Executive support. Step 1 - Creating the Prestage (MDM Server) In Apple School Manager, navigate to preferences and add an MDM server. You will have to upload a "Public Key" which can be downloaded from Jamf in the Automated Device Enrollment section This will generate an MDM Server Token which will be used later in Step 3 Step 2 - Creating a New Site In Jamf Pro, Create a new Site by navigating to the Site Tab This site will be named "Executive Support" This will be important in the next step Step 3 - Creating Automated Device Enrollment In Jamf Pro, create a new Automated Device Enrollment and upload the MDM Server Token which was downloaded in step 1 Configure the page, it will be named "TAMU - Executive Support - New Devices" Point the site to "Executive Support" which was created in Step 2 Step 4 - Creating Prestage Navigate to the prestages and create a new prestage Name the prestage "TAMU - Executive Support - New Devices" Select "TAMU - Executive Support - New Devices" under the Automated Device Enrollment Instance selection. Check the option to automatically assign new devices Enrollment site should be set to "Executive Support" Configure the rest of the settings as needed Add the following configuration profiles to the prestage: Global - Device Encryption - PreStage and Log In Jamf Connect - License Jamf Connect - Login Jamf Connect - Login (2.38.0 Branding Settings) Jamf Connect - Login (2.38.0 Entra Settings) Jamf Connect - Menu_Bar Jamf Connect - Notifications Jamf Connect - Run Script Mechanism Jamf ConnectLoginWindow WiFi (exp.04-18-26) Jamf ConnectLoginWindow WiFi (exp.04-26-25) FileVault - Escrow Personal Recovery Key to Jamf Pro Managed Login Item - Suppress Notifications Global - SupportApp - Managed Login Global - SupportApp - Notifications Global - SupportApp - PPPC Global - SupportApp - Prod - 2.6 Add the following Enrollment Packages Jamf Connect Launch Agent 2.44 Package JamfConnect 2.44 Package JamfConnectFiles.pkg Source_Images.pkg dialog-2.5.5-4802.pkg setupYourMacStarter.pkg Save

Benefit of Change​

Creating this site will allow Executive support who mostly deals with VIP customers to be segmented into their own group. This will allow deployments to be easier, exclusion to be easier, and less manual support for both teams in the long run in terms of deployments.

Impact to Customers​

None

Impact to Other Services/Websites​

None

Change Request 228441 Jamf Pro - Executive Support Site Creation.

Description: ## Details of Maintenance We will be creating a new Prestage, automated device enrollment, and site for Executive support. Step 1 - Creating the Prestage (MDM Server) In Apple School Manager, navigate to preferences and add an MDM server. You will have to upload a "Public Key" which can be downloaded from Jamf in the Automated Device Enrollment section This will generate an MDM Server Token which will be used later in Step 3 Step 2 - Creating a New Site In Jamf Pro, Create a new Site by navigating to the Site Tab This site will be named "Executive Support" This will be important in the next step Step 3 - Creating Automated Device Enrollment In Jamf Pro, create a new Automated Device Enrollment and upload the MDM Server Token which was downloaded in step 1 Configure the page, it will be named "TAMU - Executive Support - New Devices" Point the site to "Executive Support" which was created in Step 2 Step 4 - Creating Prestage Navigate to the prestages and create a new prestage Name the prestage "TAMU - Executive Support - New Devices" Select "TAMU - Executive Support - New Devices" under the Automated Device Enrollment Instance selection. Check the option to automatically assign new devices Enrollment site should be set to "Executive Support" Configure the rest of the settings as needed Add the following configuration profiles to the prestage: Global - Device Encryption - PreStage and Log In Jamf Connect - License Jamf Connect - Login Jamf Connect - Login (2.38.0 Branding Settings) Jamf Connect - Login (2.38.0 Entra Settings) Jamf Connect - Menu_Bar Jamf Connect - Notifications Jamf Connect - Run Script Mechanism Jamf ConnectLoginWindow WiFi (exp.04-18-26) Jamf ConnectLoginWindow WiFi (exp.04-26-25) FileVault - Escrow Personal Recovery Key to Jamf Pro Managed Login Item - Suppress Notifications Global - SupportApp - Managed Login Global - SupportApp - Notifications Global - SupportApp - PPPC Global - SupportApp - Prod - 2.6 Add the following Enrollment Packages Jamf Connect Launch Agent 2.44 Package JamfConnect 2.44 Package JamfConnectFiles.pkg Source_Images.pkg dialog-2.5.5-4802.pkg setupYourMacStarter.pkg Save

Benefit of Change​

Creating this site will allow Executive support who mostly deals with VIP customers to be segmented into their own group. This will allow deployments to be easier, exclusion to be easier, and less manual support for both teams in the long run in terms of deployments.

Impact to Customers​

None

Impact to Other Services/Websites​

None

Change Request 228558 Jamf Pro - Executive Support Site Creation.

Description: ## Details of Maintenance We will be creating a new Prestage, automated device enrollment, and site for Executive support. Step 1 - Creating the Prestage (MDM Server) In Apple School Manager, navigate to preferences and add an MDM server. You will have to upload a "Public Key" which can be downloaded from Jamf in the Automated Device Enrollment section This will generate an MDM Server Token which will be used later in Step 3 Step 2 - Creating a New Site In Jamf Pro, Create a new Site by navigating to the Site Tab This site will be named "Executive Support" This will be important in the next step Step 3 - Creating Automated Device Enrollment In Jamf Pro, create a new Automated Device Enrollment and upload the MDM Server Token which was downloaded in step 1 Configure the page, it will be named "TAMU - Executive Support - New Devices" Point the site to "Executive Support" which was created in Step 2 Step 4 - Creating Prestage Navigate to the prestages and create a new prestage Name the prestage "TAMU - Executive Support - New Devices" Select "TAMU - Executive Support - New Devices" under the Automated Device Enrollment Instance selection. Check the option to automatically assign new devices Enrollment site should be set to "Executive Support" Configure the rest of the settings as needed Add the following configuration profiles to the prestage: Global - Device Encryption - PreStage and Log In Jamf Connect - License Jamf Connect - Login Jamf Connect - Login (2.38.0 Branding Settings) Jamf Connect - Login (2.38.0 Entra Settings) Jamf Connect - Menu_Bar Jamf Connect - Notifications Jamf Connect - Run Script Mechanism Jamf ConnectLoginWindow WiFi (exp.04-18-26) Jamf ConnectLoginWindow WiFi (exp.04-26-25) FileVault - Escrow Personal Recovery Key to Jamf Pro Managed Login Item - Suppress Notifications Global - SupportApp - Managed Login Global - SupportApp - Notifications Global - SupportApp - PPPC Global - SupportApp - Prod - 2.6 Add the following Enrollment Packages Jamf Connect Launch Agent 2.44 Package JamfConnect 2.44 Package JamfConnectFiles.pkg Source_Images.pkg dialog-2.5.5-4802.pkg setupYourMacStarter.pkg Save

Benefit of Change​

Creating this site will allow Executive support who mostly deals with VIP customers to be segmented into their own group. This will allow deployments to be easier, exclusion to be easier, and less manual support for both teams in the long run in terms of deployments.

Impact to Customers​

None

Impact to Other Services/Websites​

None

Change Request 201733 Jamf Pro - Remove Unnecessary Configuration Profiles.

Description: Details of Maintenance: We will remove profiles from devices that no longer need to have a profile and delete some configuration profiles that are not needed.

Benefit of Change: This is an initial cleanup of the Jamf Pro servers. We will be removing some configuration profiles that are no longer needed in order to help reduce server load.

Impact to Customers: During testing no notifications happen for this set of changes being made.

Impact to other services/websites: None