With Jamf Pro, a comprehensive management system for Apple macOS computers and iOS devices such as iPads, Rice OIT staff can proactively manage Rice-owned Apple devices. This can include configuring Macs upon arrival direct from Apple through auto-enrollment, deploying and maintaining software, responding to security threats, and distributing security and other settings. More info about Jamf Pro may be found on the vendor’s website at https://jamf.com.  

• What are the benefits to Jamf Pro?
• How does it work?
• What data may be collected?
• How is the Jamf Pro agent installed?
• What devices does Jamf Pro support?
• Is my Macintosh currently enrolled in Jamf Pro?
• What is Jamf Auto-enrollment?
• What is the Software Center/Self Service Application?
• Can I connect to Software Center/Self Service when I am off-campus?
• What changes does Jamf Pro make to a Mac?
• What changes does Jamf Pro make to an iOS device?
• How will software be installed on my computer?
• Who has access to my computer?
• Will I still have Administrative access to my Mac?
• What if I have other questions?

What are the benefits of Jamf Pro?

• Software deployment, updates, and patches are delivered with little or no interaction with the user via Jamf. Most times, these deployments run in the background and do not interfere with work processes.

• Customers have access to a self-service portal which allows the self-install of software as well as some maintenance tools.

• Rice OIT staff can apply security updates and patches via Jamf.

• Data and files remain confidential.

• Assurance that devices are in compliance with federal laws and Rice University policies.

How does it work?

Jamf uses a cloud-based Jamf Pro Server which is managed by Rice OIT staff and a software agent running on enrolled Macs and iOS devices.

The agent on a macOS client checks in with the Jamf Pro Server at computer start up and periodic intervals thereafter. iOS clients check in with the Jamf Pro Server once a day, or on request by Rice OIT support staff.

What data may be collected?

• Hardware Specifications
• Installed Applications & Usage
• Currently Running Services 
• Software Updates as Available
• User Accounts and Login/Logout Timestamps
• Security Status (Firewall, SSH, etc)
• Connected Peripheral Devices

Personal information such as the contents or names of personal files (documents, email, etc) or browsing history is not collected.

How is the Jamf Pro agent installed?

All Macintosh computers purchased through Rice Marketplace will be automatically enrolled in Jamf. This process is generally self-service; however, OIT staff can remotely assist with enrolling existing Rice-owned device if needed.

What devices does Jamf Pro support?

Jamf Pro can support recent macOS and iOS devices.

Is my Macintosh currently enrolled in Jamf Pro?

To find out if your Rice-owned device is enrolled, look for the “Software Center” or “Rice Self Service” application in the Applications folder of your Mac. If you cannot locate the Software Center/Self Service application on your device, then it is probable that your device is not enrolled in Jamf Pro.

What is Jamf Auto-enrollment?

By utilizing purchasing information from Apple, Jamf can detect a new Rice-purchased Mac when it first appears on the Internet during the initial configuration process. At that point, Jamf automatically configures the Mac per Rice policies and procedures. Further configuration and software installation (such as e-mail setup or printer installation) may be obtained via the Rice KB at https://kb.rice.edu, through the Software Center/Self Service app, or by contacting the Rice OIT Help Desk for assistance.

What is the Software Center/Self Service Application?

The application is similar to the Apple App Store, but it provides customized content for University devices. This content may include access to software, maintenance tasks, links, and other documentation. The Software Center/Self Service app will give clients the flexibility of choosing what to install and when to install it. Available software and services in the Software Center/Self Service app are sparse now but will be expanded in the future.

The Software Center/Self Service app is managed and maintained by Rice OIT staff.

Can I connect to Software Center/Self Service when I am off-campus?

Yes, the Software Center/Self Service app will function when you are no longer connected to the Rice network. Depending on the speed of your Internet connection, it may take longer for tasks to complete.

What changes does Jamf Pro make to a Mac?

Jamf Pro installs the Software Center/Self Service application in the Applications folder of a Mac. Content such as software, maintenance tasks, links, and other documentation may be provided within the Software Center/Self Service app.

As is typical for Rice OIT-supported Macintosh configurations, Jamf will create an OIT admin account for the use by OIT staff as needed.

A Mobile Device Management (MDM) profile will be installed. This profile allows Jamf Pro administrators to remotely configure settings on the Mac. Basic security settings will be set at enrollment to ensure compliance with Rice policies.

If the internal storage device (hard drive or solid-state drive) is not encrypted, Jamf Pro will enable encryption of the device on enrollment and escrow that code in Jamf for future use if there's an issue with the primary user account on the Mac.

What changes does Jamf Pro make to an iOS device?

A Mobile Device Management (MDM) profile will be installed at enrollment. This profile allows Rice OIT staff to remotely configure settings. Basic security settings will be set at enrollment to ensure compliance with Rice policies. Please see Rice Policies (https://policy.rice.edu) for more information.

How will the software be installed on my computer?

Upon deployment, Jamf will push a standard set of software and updates to the machine. Other software installations may be available for clients through the Software Center/Self Service app. Rice OIT staff may also push software and software updates as needed or requested.

Who has access to my computer?

Select Rice OIT Support Specialists have the ability to manage your Rice-issued Apple device with Jamf Pro.

Will I still have Administrative access to my Mac?

The initial account created during enrollment has Administrative privileges. Other accounts may have been granted Administrative privileges as well. The status of these accounts will continue as is after Jamf is installed.

What if I have other questions?

For more information, please contact the Rice OIT Help Desk.