Seldom updated, occasionally insightful.
As part of reporting on Jamf Pro API clients and assigned API roles, I had previously written a script to report on the following information: The current list of the enabled and disabled API clients on a Jamf Pro server. Which API roles are being used by the API clients. It later occurred to me [ ]
As part of a recent discussion in the Mac Admins Slack, it was asked if it was possible to validate a FileVault personal recovery key (PRK) without having to interactively enter it. Normally, to validate a PRK using the fdesetup command line tool, you would use the following command: This file contains hidden or bidirectional [ ]
To follow up on my earlier post about creating API roles with all available privileges, I ve developed a script which will create API Roles with API privileges that are roughly equivalent to the API privileges for Jamf Pro accounts which have been assigned the following Jamf Pro account privilege sets: Administrator: Grants all account privileges [ ]
I ve been doing some work with API clients on Jamf Pro, which use API Roles to assign API privileges to the API client. One difference between assigning API privileges to an API Role as opposed to assigning API privileges to a Jamf Pro user account is that API privileges associated with a Jamf Pro user [ ]
As part of an earlier project, I had set up a status board using MagicMirror on Ubuntu LTS. As part of this, I had set Ubuntu to do the following: Reboot on a daily basis, in case any of the MagicMirror modules got hung or there was some other problem. Automatically log in as the [ ]
The good folks at Penn State have posted the session videos from Penn State MacAdmins Conference 2026. The sessions slides are all accessible from the Penn State MacAdmins’ Resources page at the link below: http://macadmins.psu.edu/conference/resources/ All session videos are available via the link below: https://www.youtube.com/playlist?list=PLGUPbEf2-7aE I’ve linked my FileVault 101 session…
I recently gave a talk on how FileVault works on Apple Silicon Macs running macOS Tahoe. As part of doing the research for it, one of the things which stood out to me is how Apple has designed encryption at rest protection for Apple Silicon Macs. If you re using an Apple Silicon Mac, most of [ ]
For those who wanted a copy of my FileVault talk at Penn State MacAdmins 2026, here are links to the slides in PDF and Keynote format. PDF: https://tinyurl.com/PSUMacAdmins2026PDF Keynote: https://tinyurl.com/PSUMacAdmins2026Keynote
As part of the release of Jamf Pro 11.29.0, the ability to run software updates using DDM is available for folks using on-premise installations of Jamf Pro. Information about this is available via the link below: Support for Managed Software Updates via Declarative Device Management for Self-Hosted Instances:…
As part of the release of macOS Tahoe, Apple deprecated the MDM-based Software Update management options and said that they would be removed the following year. Apple has carried through on this and announced publicly that legacy software update management no longer functions in all Apple 27.0 operating systems. This announcement was posted as part [ ]