Trying to integrate Casper\Jamf to App Portal.

[goody612]

Trying to add Casper\Jamf as a deployment system and running into issues. Was wondering if anyone else has done this and ran into any problems.

[jdempsey · Accepted solution]

If you're using Jamf Cloud, I've found that it requires TLS 1.2.  You could also potentially hit that with an on-prem installation of Jamf, depending on your corporate server standards.  Typically, the fix is as simple as enabling strong cryptography on your App Portal server (SchUseStrongCrypto registry key under .NET Framework).  I have a REG file that I use for this.  Many people use a PowerShell script for the same.  Here are a couple links to references that explain what's going on and how to fix it...

https://support.microsoft.com/en-us/help/4040243/how-to-enable-tls-1-2-for-configuration-manager

https://johnlouros.com/blog/enabling-strong-cryptography-for-all-dot-net-applications (this one has a short PowerShell script)

I should also mention that App Portal's integration with Jamf/Casper was developed for (and tested against) the on-prem version of Jamf only.  I've personally configured it with Jamf Pro Cloud (not to be confused with their Jamf Now offering, which is different and not compatible), so I know it mostly works there, too.  Just be aware that it hasn't yet officially been tested/supported with Jamf Cloud.  That's on the Engineering team's roadmap, but for now, I can tell you that the only thing I've found that App Portal doesn't accommodate is the use of a cloud distribution point.  As long as you have at least one on-prem distribution point for Jamf, you should be fine.

[sbeil]

@goody612 You'll find the answers you're looking for in the Flexera Community under AppPortal https://community.flexera.com/t5/App-Broker/ct-p/App-Portal

Thanks for visiting! Sandra

[jdempsey]

Hi, goodinja. I've done a few Jamf integrations with App Portal. Can you provide more information regarding the kind of issues you're having? Have you reviewed the documentation on HelpNet , specifically the topic on configuring "Casper" settings (https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/AP_Deployment_Casper.htm)?

[goody612]

It may be something to due with our environment, but we are getting SSL errors when attempting to connect App Portal to the Casper server.

[jdempsey · Accepted solution]

If you're using Jamf Cloud, I've found that it requires TLS 1.2.  You could also potentially hit that with an on-prem installation of Jamf, depending on your corporate server standards.  Typically, the fix is as simple as enabling strong cryptography on your App Portal server (SchUseStrongCrypto registry key under .NET Framework).  I have a REG file that I use for this.  Many people use a PowerShell script for the same.  Here are a couple links to references that explain what's going on and how to fix it...

https://support.microsoft.com/en-us/help/4040243/how-to-enable-tls-1-2-for-configuration-manager

https://johnlouros.com/blog/enabling-strong-cryptography-for-all-dot-net-applications (this one has a short PowerShell script)

I should also mention that App Portal's integration with Jamf/Casper was developed for (and tested against) the on-prem version of Jamf only.  I've personally configured it with Jamf Pro Cloud (not to be confused with their Jamf Now offering, which is different and not compatible), so I know it mostly works there, too.  Just be aware that it hasn't yet officially been tested/supported with Jamf Cloud.  That's on the Engineering team's roadmap, but for now, I can tell you that the only thing I've found that App Portal doesn't accommodate is the use of a cloud distribution point.  As long as you have at least one on-prem distribution point for Jamf, you should be fine.

[jdempsey]

To expand on the cloud distribution point item referenced in my earlier post, if you have a need to use a cloud distribution point, you can still do so; however, you will have to initially select an on-prem distribution point when creating the catalog item in App Portal.  After the catalog item has been created, you can go into Jamf's admin console and modify the deployment properties to use the cloud distribution point.  It just won't appear in the list of available options during the create catalog item wizard.

[nalinih]

Mainly looking for App Portal Integration with JAMF cloud. I saw the 2 requirements; TLS 1.2. and strong encryption. Seems like API an option : https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/API_Calls_Used_by_App_Portal_to_Integrate_with_Casper.htm#gettingstarted_513138262_1555590 Appreciate any help with JAMF Cloud setup. Thanks

[jdempsey]

No need for manual API integration.  Within the product (and our documentation), we still reference JAMF as Casper, so that's what you're looking for within the site settings in the UI.  Here's where you'll find documentation on configuring the integration:

https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/AP_Deployment_Casper.htm

[goody612 · Accepted solution]

Thanks. Enabling TLS 1.2 was what corrected the issue we were seeing.

Thanks,

Jon Goodin
InSequence, Inc.
618-772-9525

[nalinih]

That was one suggestion, TLS 1.2  was already enabled. 

Network admin had to enable 'JAMF' (sorry don't have the details, guessing on the firewall side)

Thanks for your response.