Section 3: Jamf Pro Setup and Infrastructure Flashcards
What is APNs?
APNs stands for Apple Push Notification service and is responsible for facilitating communication between an MDM provider like Jamf Pro and the devices that MDM provider manages. Without a connection to APNs, Jamf Pro cannot send MDM commands to enrolled devices for management.
How often must a push certificate be renewed?
A push certificate for APNs must be renewed yearly with the same Apple ID that initially created the certificate
How can MDM be used to manage devices?
Using MDM, we can send one-time remote commands to enrolled devices. We can also apply restrictions and other settings with configuration profiles. Finally, we can deploy volume-licensed apps from Apple School Manager or Apple Business Manager.
Can a device that’s not connected to a network receive MDM commands from Jamf Pro?
No. If a device is not connected to the internet, it will not have access to APNs.
What functions do the Apple School Manager and Apple Business Manager platforms provide to administrators?
Apple School Manager and Apple Business Manager allow for organizations to acquire licenses of apps and books for distribution, configure automated enrollment with an MDM Provider like Jamf Pro, and create Managed Apple IDs.
What does integrating Global Service Exchange (GSX) with Jamf Pro allow organizations to accomplish?
If an organization is eligible for Apple’s Self-Servicing Account program, they can integrate GSX with Jamf Pro to provide warranty information right in a device’s inventory record.
Where can version information and enrollment counts be found in Jamf Pro?
Version information and device counts can be found in the sidebar while on the dashboard and settings screens.
Where can the Jamf Pro suite of apps be downloaded?
The Jamf Pro suite of apps, as well as many other helpful files, can be downloaded from account.jamf.com.
What is the Users tab used for?
The Users tab is primarily used for the user-based volume distribution of apps and books.
What are the available privilege sets in Jamf Pro?
Administrator, Auditor, Enrollment Only, and Custom
If a user is added to two groups, how are the privileges of both groups treated?
The user receives the combined privileges of all groups.
Where can Jamf Pro user accounts be found?
Jamf Pro user accounts can be found in Settings > System Settings > Jamf Pro User Accounts and Groups.
Does a device need to be a part of Apple School Manager or Apple Business Manager to leverage Automated Device Enrollment?
Yes, devices must be purchased and associated with Apple School Manager or Apple Business Manager in order to leverage Automated Device Enrollment in Jamf Pro.
Why must a device have internet access during Setup Assistant?
Internet access is required because all Apple devices contact Apple’s servers during Setup Assistant to determine if they belong to an organization, like a school or business. If they do belong to an organization, devices can then contact their assigned MDM provider for enrollment instructions.
What are some benefits of using a PreStage enrollment for device setup?
When using a PreStage enrollment, administrators can configure a simplified Setup Assistant experience. The PreStage enrollment can also be used to customize the experience with organization-specific branding. For computers, PreStage enrollment provides the option to configure a local administrator account and designate standard privileges for users by default.
