What’s Included
After the initial implementation described in the Onboarding section, Managed Solution shall provide managed Jamf device management services to continuously secure and manage Client’s Apple device environment. Subject to Client’s selected subscription, managed Jamf services may include oversight of device management operations such as monitoring, policy management, system maintenance, user support, and compliance reporting to ensure device security and operational continuity.
Depending on the selected subscription, services will generally include:
- Managed Solution will ensure all in-scope Apple devices (e.g., MacBooks, iMacs, iPhones, and iPads) are enrolled in Jamf and monitor enrollment status and policy compliance via the Jamf dashboard and automated alerts. Devices falling out of compliance will be identified and remediated, including notifying Client or end users and enforcing compliance requirements through the management system where possible.
- Managed Solution will develop, apply, and maintain management policies and configuration profiles for Client’s Apple devices in accordance with Client’s security standards and operational needs, including encryption (FileVault), firewall settings, password complexity, screen lock, network configurations (Wi-Fi and VPN), and email profiles. Policies and profiles will be updated as industry best practices or Client’s requirements evolve.
- Managed Solution will manage the deployment of software and updates to managed Apple devices, including packaging and deploying approved applications (utilizing Apple’s Volume
- Purchase Program where applicable) and pushing macOS/iOS updates and patches. Update deployments will be coordinated with Client to minimize end-user disruption, with critical security patches expedited as needed to address emerging threats.
- Managed Solution will provide remote support and troubleshooting for Apple device management issues, including enrollment problems, policy enforcement conflicts, lost or stolen device tracking, and remote lock or wipe (where authorized), as well as issues with managed applications on Apple devices.
- Managed Solution will manage Jamf integration points, including Apple Business Manager (ABM) and directory services (e.g., Active Directory or Azure AD). We will perform regular maintenance of the Jamf environment, including software updates, renewal of required certificates (e.g., Apple Push Notification Service certificate), and verification of Jamf configuration backups where applicable.