goody612
Level 7

Trying to integrate Casper\Jamf to App Portal.

Jump to solution
Trying to add Casper\Jamf as a deployment system and running into issues. Was wondering if anyone else has done this and ran into any problems.
0 Kudos
2 Solutions

If you're using Jamf Cloud, I've found that it requires TLS 1.2.  You could also potentially hit that with an on-prem installation of Jamf, depending on your corporate server standards.  Typically, the fix is as simple as enabling strong cryptography on your App Portal server (SchUseStrongCrypto registry key under .NET Framework).  I have a REG file that I use for this.  Many people use a PowerShell script for the same.  Here are a couple links to references that explain what's going on and how to fix it...

https://support.microsoft.com/en-us/help/4040243/how-to-enable-tls-1-2-for-configuration-manager

https://johnlouros.com/blog/enabling-strong-cryptography-for-all-dot-net-applications (this one has a short PowerShell script)

I should also mention that App Portal's integration with Jamf/Casper was developed for (and tested against) the on-prem version of Jamf only.  I've personally configured it with Jamf Pro Cloud (not to be confused with their Jamf Now offering, which is different and not compatible), so I know it mostly works there, too.  Just be aware that it hasn't yet officially been tested/supported with Jamf Cloud.  That's on the Engineering team's roadmap, but for now, I can tell you that the only thing I've found that App Portal doesn't accommodate is the use of a cloud distribution point.  As long as you have at least one on-prem distribution point for Jamf, you should be fine.

Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".

View solution in original post

Thanks. Enabling TLS 1.2 was what corrected the issue we were seeing.

Thanks,

Jon Goodin
InSequence, Inc.
618-772-9525

View solution in original post

9 Replies
sbeil
Revenera Moderator Revenera Moderator
Revenera Moderator

@goody612 You'll find the answers you're looking for in the Flexera Community under AppPortal https://community.flexera.com/t5/App-Broker/ct-p/App-Portal

Thanks for visiting! Sandra

jdempsey
Moderator Moderator
Moderator
Hi, goodinja. I've done a few Jamf integrations with App Portal. Can you provide more information regarding the kind of issues you're having? Have you reviewed the documentation on HelpNet , specifically the topic on configuring "Casper" settings (https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/AP_Deployment_Casper.htm)?
Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".
0 Kudos
It may be something to due with our environment, but we are getting SSL errors when attempting to connect App Portal to the Casper server.
0 Kudos

If you're using Jamf Cloud, I've found that it requires TLS 1.2.  You could also potentially hit that with an on-prem installation of Jamf, depending on your corporate server standards.  Typically, the fix is as simple as enabling strong cryptography on your App Portal server (SchUseStrongCrypto registry key under .NET Framework).  I have a REG file that I use for this.  Many people use a PowerShell script for the same.  Here are a couple links to references that explain what's going on and how to fix it...

https://support.microsoft.com/en-us/help/4040243/how-to-enable-tls-1-2-for-configuration-manager

https://johnlouros.com/blog/enabling-strong-cryptography-for-all-dot-net-applications (this one has a short PowerShell script)

I should also mention that App Portal's integration with Jamf/Casper was developed for (and tested against) the on-prem version of Jamf only.  I've personally configured it with Jamf Pro Cloud (not to be confused with their Jamf Now offering, which is different and not compatible), so I know it mostly works there, too.  Just be aware that it hasn't yet officially been tested/supported with Jamf Cloud.  That's on the Engineering team's roadmap, but for now, I can tell you that the only thing I've found that App Portal doesn't accommodate is the use of a cloud distribution point.  As long as you have at least one on-prem distribution point for Jamf, you should be fine.

Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".

To expand on the cloud distribution point item referenced in my earlier post, if you have a need to use a cloud distribution point, you can still do so; however, you will have to initially select an on-prem distribution point when creating the catalog item in App Portal.  After the catalog item has been created, you can go into Jamf's admin console and modify the deployment properties to use the cloud distribution point.  It just won't appear in the list of available options during the create catalog item wizard.

Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".
0 Kudos
Mainly looking for App Portal Integration with JAMF cloud. I saw the 2 requirements; TLS 1.2. and strong encryption. Seems like API an option : https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/API_Calls_Used_by_App_Po... Appreciate any help with JAMF Cloud setup. Thanks
0 Kudos

No need for manual API integration.  Within the product (and our documentation), we still reference JAMF as Casper, so that's what you're looking for within the site settings in the UI.  Here's where you'll find documentation on configuring the integration:

https://helpnet.flexerasoftware.com/appportal2019r1/default.htm#helplibrary/AP_Deployment_Casper.htm

 

Anything expressed here is my own view and not necessarily that of my employer, Flexera. If my reply answers a question you have raised, please click "ACCEPT AS SOLUTION".
0 Kudos
Thanks. Enabling TLS 1.2 was what corrected the issue we were seeing.

Thanks,

Jon Goodin
InSequence, Inc.
618-772-9525

That was one suggestion, TLS 1.2  was already enabled. 

Network admin had to enable 'JAMF' (sorry don't have the details, guessing on the firewall side)

Thanks for your response.

 

0 Kudos