Jamf Pro troubleshooting: certificates, policy logs, profiles and FileVault keys
Keeping Jamf Pro working and finding out why something didn't happen, from the Jamf Pro Documentation: the push certificate, ADE server token and MDM profile renewals that keep devices manageable, what's installed on a managed Mac and where it logs, why a policy did or didn't run (execution frequency, policy logs and flushing), failed configuration profiles, FileVault recovery keys, and extension attributes that don't break your smart groups.
- Level
- Intermediate
- Length
- About 50 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 2 Oct 2026
- Jamf Pro
Skills you'll practise
- Renew the push certificate with the same Apple Account and keep the ADE server token and MDM profiles current
- Find the jamf binary, its log and the launch daemons on a managed Mac
- Explain from the execution frequency and policy log why a policy did or didn't run, and when flushing a log re-runs it
- Resolve a configuration profile stuck in Failed using the documented retry behaviour and Send Blank Push
- View and rotate FileVault recovery keys with the right privileges and audit trail
- Add or rename extension attributes without breaking smart group scoping or slowing inventory
Course outline
- 1.Jamf Pro troubleshooting and maintenanceVideo · 2 min
- 2.The certificates and tokens that keep devices manageableLesson · 17 min
- 3.Why did (or didn't) that policy run?Lesson · 17 min
- 4.FileVault recovery keys and extension attributesLesson · 14 min
- 5.Jamf Pro troubleshooting: certificates, policy logs, profiles and FileVault keys: knowledge checkKnowledge check · 16 questions
- 6.Final exam11 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Jamf Pro Documentation: Push Certificates
- Jamf Pro Documentation: Renewing the Push Certificate
- Jamf Pro Documentation: Replacing the Server Token File to Renew an Automated Device Enrollment Instance
- Jamf Pro Documentation: Configuring MDM Profile Renewal for Computers or Mobile Devices
- Jamf Pro Documentation: Components Installed on Managed Computers
- Jamf Pro Documentation: Recurring Check-in Frequency
- Jamf Pro Documentation: Execution Frequency for Policies
- Jamf Pro Documentation: Viewing and Flushing Logs for a Policy
- Jamf Pro Documentation: Troubleshooting a Failed Status of a Configuration Profile
- Jamf Pro Documentation: Event Logs
- Jamf Pro Documentation: Viewing the FileVault Recovery Key for a Computer
- Jamf Pro Documentation: Issuing a New FileVault Recovery Key for a Computer
- Jamf Pro Documentation: Computer Extension Attributes
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.