hey gang! I have another question. I just manually...
# fleetb
Billy H
11/04/2024, 10:19 PMhey gang! I have another question. I just manually onboarded a mac to our Fleet instance this afternoon and noticed that the MDM enrollment dialog has changed. It appears that you can no longer manually download the mobileconfig file to enroll in Fleet MDM. The instructions on the enrollment page are as follows:
1. From the Apple menu in the top left corner of your screen, select System Settings or System Preferences.
2. In the sidebar menu, select Enroll in Remote Management, and select Enroll
3. Enter your password, and select Enroll.
4. Close this window and select Prefetch on your My device page to tell your organization that MDM is on.
But the issue is that there is no such option that I am seeing in System Settings called "Enroll in Remote Management" and browsing to the profiles section shows that there are no profiles waiting to be approved.
Am I missing something here? Mac is running macOS 14.7.1
r
Rebecca Cowart
11/05/2024, 4:05 PMCould you please send a link to the instructions you are following?
b
Billy H
11/05/2024, 4:10 PMI cannot, they are the instructions presented to me when I click "Turn on MDM" I can send a screenshot though
r
Rebecca Cowart
11/05/2024, 4:13 PMA screenshot would be great, thanks!
Rebecca Cowart
11/05/2024, 4:30 PMHere are our latest docs for setting up MacOS MDM.
https://fleetdm.com/guides/macos-mdm-setup
b
Billy H
11/05/2024, 4:34 PMScreenshot 2024-11-05 at 11.29.37 AM.png
Billy H
11/05/2024, 4:35 PMScreenshot 2024-11-05 at 11.29.37 AM.png
r
Rebecca Cowart
11/05/2024, 4:48 PMI would advise trying to follow the steps in the MDM Setup guide I just linked. Let me know if you have any issues with it.
Rebecca Cowart
11/05/2024, 4:48 PMThank you for the screenshot as well. My team will want to take a look and make any necessary updates.
b
Billy H
11/05/2024, 4:50 PMI do already have MDM setup and enabled for my whole org.
Billy H
11/05/2024, 4:51 PMI see this note in here:
If your certificate expires, you will have to turn MDM off and back on for all macOS hosts.r
Rebecca Cowart
11/05/2024, 5:33 PMYou should not need to toggle MDM on/off when renewing APNs certificates, only when the cert expires. I will look more into this issue and get back to you.
Rebecca Cowart
11/06/2024, 2:57 PMJust ruling out other issues, but did you use the same Apple ID when renewing your APNs cert?
b
Billy H
11/06/2024, 2:58 PMYup!
r
Rebecca Cowart
11/06/2024, 3:41 PMI think it would be worth a try to run the uninstall script on the host and remove from Fleet server side. Then create a new package for it.
https://github.com/fleetdm/fleet/blob/main/orbit/tools/cleanup/cleanup_macos.sh
7 Views