How to Enroll a Mac Computer into JAMF Pro
Enrolling a Mac Computer into JAMF
To enroll a Mac computer you will need an account in JAMF. At the moment, there is a limited number of people with access to JAMF. To be given access to it, you would need to speak to Paul (until Andrew’s replacement is hired). John has the ability to give access and create accounts, but would rather let the bosses decide who gets the keys to JAMF this early when he’s still setting a lot of it up.
In Safari, browse to the Enrollment Site:
Log in with your JAMF credentials:
When prompted to assign the computer to a JAMF Pro user, you can skip assignment and just click Enroll.
Next, we are prompted to download and install the MDM profile.
A notification pops up for Profile installation in the top right notification area:
Open this by clicking on the notification. You can also get here by going to System Settings – General – Device Management.
Double click on the MDM Profile under Downloaded to view the profile.
The profile will look like this. Click Install…
It will ask “Are you sure?” Click Install again.
Once you click Install it will ask for your Administrator login. Use the Administrator account and the password for the Macs. (If you are unsure about the Administrator password, reach out to John as we are going to be changing the passwords soon. Once the Admin password is set, I will share it with the team and edit this part of the document).
At this point the MDM profile will be installed and the rest of the JAMF management framework will install.
We will start to see various profiles that the computer is in scope of start to populate in Device Management (* formerly under Privacy & Security – Profiles)
Now we can hop over to JAMF Pro and see the device is enrolled.
From the left menu you will want to click Computers and select Inventory and Search Inventory. You can search by the computer name (note that if you have not configured your search options you will need to type in the exact name of the computer for it to appear. I will write up a separate document regarding configuring your search results.)
If you simply click on the Search button you will be shown All Computers enrolled in JAMF, but at some point this will be impractical.
For this example, we are looking at TestMacBook, a MacBook that I have been using to test JAMF. I will type TestMacBook into the search box and click it to select.
Here we see just a bit of how extensive JAMF is at pulling info from the Computer. Some things to look for are that Supervised is set to YES. We can also see when exactly we enrolled the device and when we will need to renew it (exactly 2 years).
The device has been enrolled. In other articles I will detail the process that happens before all this, such as Creating a Push Certificate (<-- future link to KB article).