Skip to content Skip to site navigation

Jamf @Stanford FAQS

Below is a list of common questions and answers for Jamf @ Stanford.

Jamf @ Stanford

What is Jamf @ Stanford?
Jamf is a Mobile Device Management (MDM) solution for managing the Apple platform. With Jamf, we can proactively manage the entire lifecycle of all Apple devices. Lifecycle management for macOS includes deploying and maintaining software, responding to security threats, distributing settings, and analyzing inventory data.
How does Jamf work?
When a device enrolls with Jamf@Stanford, it uses the Apple Push Notification service (APNs) to communicate directly with the Jamf MDM instance in the cloud to receive configurations. The experience between a device and IT changes as new opportunities are available. As the Stanford Jamf system matures, setup can begin when a device comes out of the box (known as zero-touch deployment) without a technical consultant's physical interaction. A client can decide what applications and settings they want from the application catalog (coming later) while essential updates install in the background without downtime. 
What information does Jamf collect?
We've customized our implementation to collect only the data needed to support Stanford Mac devices and keep our networks and data safe. Jamf can:
  • View model, serial number, and operating system
  • Identify your device by name
  • Reset lost or stolen device to factory settings
  • View disk encryption status
  • View information for installed applications (e.g. log files, plist settings files)
For a complete list of attributes, Jamf can view for a computer, review the Managing Computers > Inventory for Computers > Computer Inventory Information Reference section of the latest version at the Jamf Pro Administrator’s Guide.
What information does Jamf NOT collect?
Jamf does not collect personal information, such as the contents or names of individual files (documents, email, etc.) or any browsing history. Jamf can't:
  • View browsing history on a device
  • See your personal emails, documents, contacts, or calendar
  • Access your passwords
  • View, edit, or delete photos
  • View frequency of application use
  • See the location of a device

Jamf for macOS

Why has Stanford chosen Jamf to replace HCL BigFix on Stanford Macs?
Due to security changes in recent versions of the macOS architecture, BigFix is no longer adequately performing the tasks needed to manage Apple's operating system. As we transition management systems to Jamf, BigFix will remain until Jamf provides management parity. The same teams who currently govern BigFix will manage Jamf.
How do updates work?
Jamf’s software updates and patching will usually be invisible to you. Software updates download to your computer in the background at a speed that allows your computer tasks to proceed without interruption or delay. App Store updates are installed daily around midnight, whereas third-party apps might have their own schedule. Microsoft apps are updated monthly and installed automatically if the programs are closed.
Will I still have administrative access to my Mac?
There will be no automatic changes to the privileges of your device.
How do I know if Jamf is installed on my device?
Open System Preferences > Profiles. From the list on the left, click on Stanford Device Management. On the right, you should see “Description:”.
In the MDM Profile, it shows in red text that Jamf has the ability to delete data from my computer. Should I be worried?
For transparency reasons, Jamf’s capability as it relates to erasing data is displayed. This is a standard function of any device management system. Be assured that your data is safe and we will not take this action without your consent. This function is generally reserved for lost or stolen devices.

Jamf for iOS

Why has Stanford chosen Jamf to replace WorkSpace ONE / AirWatch on Stanford iOS devices?
Due to security changes in recent versions of the macOS architecture, BigFix is no longer adequately performing the tasks needed to manage Apple's operating system. As we transition management systems to Jamf, WS1/AirWatch will remain until Jamf provides management parity. The same teams who currently govern WS1/AirWatch will manage Jamf.
Will I lose personal data during migration? What happens to my email when I migrate to Jamf?
You will not lose personal data. During the migration, you will lose access to Stanford email temporarily due to the removal of the WS1 configuration. Once your device is enrolled in Jamf, a new email configuration will be pushed to your device. After you provide your credentials, emails will download to your device. Additionally, users will be offered to install a pre-configured Outlook or Gmail app as optional email clients to use alongside the native Mail app.
I received a Profile Installation Failed error message when trying to install the Jamf profile. What does this mean?
If you received a pop-up error message that says, “The new MDM payload does not match the old payload.” This means you already have a Mobile Device Management (MDM) profile installed. You can only have one MDM on your device at a time. In Settings, Open the Profile of the installed Mobile Device Management and select Remove Management so that you can then enroll in the new Device provider (Jamf) and download that profile. Visit iOS Manual Migration to learn more.
I received an Untrusted Enterprise Developer message when opening the Migrate app. What does this mean?
If you opened the Migrate app, but navigated away, upon returning to the Migrate app, you may get a pop-up error message that says, “iPhone Distribution: Stanford University, IT Services has not been trusted on this iPhone….” Since this is a custom-developed app, you’ll need to go into Settings, General, Device Management menu to see the Stanford University, IT Services app installed. Click “Trust Stanford University, IT Services” and Trust. You can now open/close the Migrate App as you often as you wish.
Can I delete the Migrate app on my iOS device after I migrated?
Yes, it is safe to delete the Migrate app after migrating to Jamf.
What is Self-Service App?
Included with Jamf enrollment or accessible via the App Store, Self Service empowers end-users with access to University-approved applications and configurations through a click of a button. The highly customizable Self Service catalog features productivity, compliance, connectivity software, and more. You can install software or quickly configure your device without IT intervention by launching Self Service from your Applications folder. Some groups might see the Self Service icon on their desktop. Visit the Jamf website to learn more about Apple self-service.
Last modified October 13, 2021