Migrating Devices from Kandji to JumpCloud

You can migrate macOS devices that are managed by Kandji’s Mobile Device Management (MDM) to JumpCloud’s MDM. JumpCloud’s Admin Portal lets you manage not only your Apple devices, but also Windows and Linux devices in one place to centralize and streamline device management.

The Kandji-managed devices must have been enrolled in Apple’s Automated Device Enrollment with Apple Business Manager (ABM) or Apple School Manager (ASM) before they can be migrated to JumpCloud. After the agent is installed, if a device has an MDM enrollment profile already installed, you’ll use Kandji to remove the device’s enrollment and uninstall Kandji. You’ll then unassign the device in ABM and reassign it to JumpCloud’s MDM, and push the new enrollment profile to the device.

To migrate an Automated Device Enrollment-enrolled device to JumpCloud MDM:
The screens in this procedure are taken from ABM’s 2021 Beta software.

1. Install the JumpCloud agent on the device using Kandji’s PKG installer. See the Kandji documentation for more detail. After that, install a Privacy Preferences Policy Control (PPPC) profile for JumpCloud, using the settings described in Granting Full Disk Access Permissions to the JumpCloud Agent for MacOS.
2. Confirm that the device appears in the Devices List in the JumpCloud Admin Portal.
3. Using Kandji, remove the device from Kandji. See the instructions in the Kandji documentation. 
4. Unassign the device from your ABM or Apple School Manager (ASM) account:
   1. Log into your ABM or ASM account.
   2. Click Devices in the sidebar and select your device.
   3. Click Edit MDM Server.
   4. Select Unassign from the current MDM and click Continue.
      
   5. Click Continue again.
5. Reassign the device to JumpCloud’s MDM Server:
   1. In ABM or ASM, click Devices in the sidebar and select your device.
   2. Click Edit MDM Server.
   3. Select Assign to the following MDM and choose the JumpCloud MDM Server from the list.
      
   4. Click Continue and then click Continue again.
6. Create a new JumpCloud command to enroll macOS devices in JumpCloud MDM:
   1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
   2. Go to USER MANAGEMENT > Users. 
   3. Click ( + ), then follow the instructions in Get Started: Commands to create a new command and name it appropriately (for example, Enroll in JC MDM).
   4. For Run As, select root.
   5. Select Mac.
   6. Enter this in the Command field:
      # !/bin/bash
      profiles renew -type enrollment
   7. For Event, select Run Manually.
      
   8. Select the Devices tab and select the device where you want to run this command.
   9. Click save.

7. Run the command to push the enrollment profile to the device:
   1. ​​​​In the Command List, select the check box next to the command you just created.
   2. Click run now.
      
8. Instruct the user to accept the new enrollment profile on the device.