Connect Jamf Pro

Before you start

You need the Jamf Pro administrator admin rights described below, and in Trusterio the right to manage integrations (owners and admins have it). Anybody else sees the page read-only.

Connect it

1. Open Automation and choose Connect on the Jamf Pro administrator card. (The link opens the dialog straight away.)
2. Give it a name under What to call it, and read What to grant: every permission and what it is for.
3. Press Add it and enter the credential. You land on the connection’s own page.

In Jamf Pro

1. You need Jamf Pro 10.49 or later. Jamf Now and Jamf School cannot be connected.
2. Go to Settings → System → API roles and clients.
3. Create an API role with Read Computers and Read Mobile Devices.
4. Create an API client with that role, enable it, and generate its secret.

In Trusterio

Fill in the Jamf Pro URL, Data region, API client ID and API client secret, and press Save credentials.

A role without those privileges reads an empty list rather than failing. After the first reading, check the number of devices is what you expect.

What it checks

• FileVault, firewall, Gatekeeper and System Integrity Protection on
• OS version current, devices checking in

After it is connected

• Press Sync now for the first reading. The Tests tab shows each check: what it should be, what was found, and what is affected.
• New connections are read by hand until you choose a schedule: in Monitoring, on the Collection tab, pick Every hour, Every 6 hours, Daily or Weekly.
• The page says when it was last read and its health; Sync History keeps every run.

A connection marked Beta on the Automation screen has not been tried on a real account yet: its permission list is our reading of the provider’s documentation. AWS, Azure, Google Cloud and Jira have been. If a permission is wrong, tell us.

Disconnect

On the connection’s page, choose Disconnect. Reading stops and its credentials are deleted; its history, checks and evidence stay. Then remove what you created at the provider:

• Disable or delete the API client in Jamf Pro.