The Jamf Pro MDM Platform

What is Jamf Pro?

Jamf Pro is a Mobile Device Management (MDM) platform specifically developed for Apple devices that allows the College ICLT team to remotely configure, manage and protect student devices.

Selected by both Catholic Education, Diocese of Wollongong (CEDoW) and St Benedict's, Jamf Pro simplifies, unifies, and increases the effectiveness of ICLT service areas in: installing apps, software and updates; enforcing security policies; tracking and managing inventory; and configuring settings to help maintain device compliance across the College for the duration of a student's enrolment.

Jamf Pro functions via an MDM Profile, accessible via the Mac's System Settings, which is installed as part of enrolling the student devices in the College's BYODD MacBook Program. The Mac enrolment process is completed either by families or with the assistance of the College's ICLT team at the start of a student's enrolment at St Benedict's.

How does the College use Jamf Pro?

Key Functions

• Software Management: The College's ICLT team can automatically install and update apps and software, with a Self Service portal available to students to install additional approved and maintained apps for their learning.

• Security & Compliance: Enables the enforcement of critical & compulsory security policies on devices. This includes the Zscaler SSL security certificate & Client Connector app to enable more robust internet safety and website filtering protections while on the College's network.

• Inventory & Data Analysis: Allows for the automatic collection of detailed device hardware, software and usage information for more effective management (see below).

• Configuration: Applies custom settings and configurations for specific apps and services, such as a managed bookmarks folder for the Google Chrome web browser, Zoom domain settings, or individual app license keys.

Device Restrictions & Student Wellbeing Measures

• Functionality (Years 7 to 10): Disables certain Sharing options, such as AirDrop and iPhone Mirroring, while on the College's network to help students focus on learning tasks and to reduce the risk of inappropriate content distribution.

• App Blocks (Years 7 to 10): Blocks certain social apps or games, including Messages and FaceTime, while on the College's network to help students focus on learning tasks.

• Time Limit (Years 7 to 9): Enforces a daily curfew period of 11:00 pm to 7:00 am on devices to assist students with developing healthy and responsible technology usage habits outside of school.

Data Privacy & Collection

• What Jamf Pro can see:

  • Device-specific hardware information, such as: device name, serial number, model, battery status & capacity, IP address

  • Security information, such as: encryption status, system configurations, software restrictions

  • Software information, such as: macOS version, installed applications & services, storage capacity

• What Jamf Pro cannot see:

  • Personal data, including personal photos, videos, or files stored on the device

  • In-app data: individual messages or content within non-school apps

  • Local user and passwords data: passwords to log in to any user account on the device or passwords saved to the device

The importance of the MDM Profile

The Jamf Pro MDM Profile is the College's primary method in ensuring student devices are up to date, have the required apps and software installed, are secure and compliant, and are accessing the network and resources in a safe and responsible manner.

Consequently, this MDM Profile is a compulsory component of a student's enrolment at St Benedict's.

Removing, failing to install, or attempting to modify the MDM Profile is not only a violation of the CEDoW Student Responsible Use of Technology Agreement, but restricts the device from safely and securely accessing the College's network, apps and services required for learning. This action will also result in disciplinary actions being taken against students.

It is also important to note that if a student's device is erased, replaced, or in the event of some service/repairs, the MDM Profile will need to be reinstalled; please contact the IT Office for assistance.

When a student signs out from St Benedict's, the MDM Profile will either be removed remotely by the IT Office or instructions provided to families on how to perform this.

We wish to remind families that the use of Jamf Pro by the College does not replace the need for our students to always respect themselves, others, and property, particularly in relation to technology resources. Please refer to the CEDoW Student Responsible Use of Technology in Compass or the Student Responsibilities page for more information.

If you have any questions about device management, please contact your child's Year Coordinator or raise a support request via the ICLT Support page.