"I Have No Idea What Terraform Is" - Infrastructure as Code for Mac Admins

If you're clicking through Jamf Pro configs manually, you're about to learn why that's becoming a problem. Security teams are starting to ban console access. MSPs are wasting hours rebuilding the same configs for each client. And organizations scaling to hundreds of Macs are drowning in manual changes with zero audit trail. Ryan Legg, Jamf's Solutions Engineer for Infrastructure as Code, breaks down how Terraform lets you manage your entire Jamf environment through code instead of clicking. Whether you're managing 50 Macs or 5,000, here's why this matters NOW. CHAPTERS 4:45 What is Infrastructure as Code - Explained for Non-Coders 8:15 What is Terraform and Why It Exists 11:30 How Terraform Talks to the Jamf API (Without You Writing Scripts) 14:45 Jamf Terraform Provider - 2+ Years in Development 18:20 Version Control for Configs - Git, Testing, Rollback 21:40 Why This Matters - Audit Trails, No Manual Errors, Scalability 24:30 MSP Use Case - Deploy to Multiple Clients in Minutes 27:15 Enterprise Use Case - Manage Hundreds of Configs with Code 30:10 Small Team Use Case - Document Everything as You Build 34:00 Why Every Admin Should Learn This NOW - The Future is Code 37:13 Getting Started - Resources and Documentation 39:09 Wrap-Up - Where to Get Help What You: 4:45 "Treating your Jamf config like a software project" - what that actually means 18:20 Multiple admins can submit changes through pull requests - no more stepping on each other 24:30 MSPs: Stop rebuilding configs manually - use one Terraform module across all clients 30:10 - Small teams: Codify early so the next person doesn't start from zero 34:00 - "Organizations are requiring admins OUT of consoles" - security trend you need to know   RESOURCES: Jamf Concepts (Start Here): https://concepts.jamf.com Trusted by Jamf (Tutorials): https://trusted.jamf.com  Jamf Developer Portal: https://developer.jamf.com MacAdmins Slack: https://macadmins.org   WHO NEEDS TO WATCH: Mac Admins who manually configure Jamf Pro (you're wasting time) MSPs managing multiple Jamf instances (you're rebuilding the same thing repeatedly) IT teams scaling past 500+ devices (manual configs won't scale)   Jamf After Dark: A podcast about managing Apple devices, hosted by Kat Garbis and Josh Thornton. Guest: Ryan Legg, Solutions Engineer III at Jamf #JamfAfterDark #Terraform #JamfPro

John Britton, CEO of WorkBrew, joins Jamf After Dark to discuss how organizations can solve the security, compliance, and management challenges of using the open-source package manager Homebrew on macOS at scale. This episode is a must-listen for any IT or Security leader managing a fleet of Mac devices used by software engineers. Learn how WorkBrew provides visibility, governance, and automated security workflows for developer tools, all while integrating seamlessly with Jamf Pro. What You'll Learn: The security and compliance risks of unmanaged Homebrew in the enterprise. How WorkBrew provides visibility, remote management, and security for Homebrew. The seamless integration between Jamf Pro and WorkBrew for deployment and device group management. How to enable developers to use Homebrew as standard (non-admin) users on macOS. Strategies for distributing and managing private, internal company tools via Homebrew taps. The end-user experience for a developer when a company adopts WorkBrew. Featured Guest: John Britton: Co-founder and CEO of WorkBrew, a platform for securing and managing Homebrew in the enterprise. John is a software engineer with deep expertise in developer tools and experience. He is a contributor to the open-source Homebrew project and is passionate about enhancing developer productivity while meeting enterprise security standards. 0:00:00 - Introduction: Managing Your Digital Tools 0:04:01 - What is Homebrew? The "App Store for Developers" on Mac 0:05:24 - The Challenge: Why Homebrew Creates Risk for IT & Security Teams 0:08:12 - The Solution: What is WorkBrew and How Does it Help? 0:12:19 - Core Features: Deployment, Visibility, Management & Security 0:14:45 - How WorkBrew Benefits Engineers, IT Admins, and Security Teams 0:17:35 - How WorkBrew Integrates with Jamf for Deployment & Policy Management 0:22:55 - Advanced Use Case: Managing Private & Internal Company Packages 0:25:41 - The Developer Experience: Migrating from Homebrew to WorkBrew 0:28:58 - A Major Win: Enabling Homebrew for Standard (Non-Admin) Users 0:32:33 - The Rise of Mac in the Enterprise & Employee Choice 0:36:39 - How to Get Started with WorkBrew (Including the Free Plan) 0:38:58 - Final Thoughts & Key Takeaways Read more: Get started with WorkBrew's free and paid plans: https://workbrew.com/ Join the Mac Admins Foundation Slack Community: https://www.macadmins.org/ Learn more about Jamf Pro: https://www.jamf.com/products/jamf-pro/ #Jamf #WorkBrew #Homebrew #MacAdmins #EndpointSecurity

Katie English & Chris Schasse discuss JNUC 2025 highlights: Platform SSO, Blueprints updates, AI security features, and macOS Tahoe improvements.   What You'll Learn: Platform API updates enabling third-party integrations with Jamf Blueprints and compliance features Platform SSO implementation replacing traditional Jamf Connect workflows Automated software update workflows through Jamf Blueprints AI Assistant capabilities for macOS security alerts and configuration profile analysis macOS Tahoe (macOS 15) and iOS 18 security enhancements Cybersecurity best practices for October 2025 Cybersecurity Awareness Month   Featured Guests: Katie English - Principal Product Manager at Jamf, former Jamf After Dark podcast host, expert in Apple device management and security product development Chris Schasse - Owner and Lead Technician at Rocketman Tech, former Jamf Professional Services team member, Jamf-focused MSP specialist, host of the Launchpad meetup Read more: https://www.jamf.com/blog/macos-26-platform-sso-simplified-setup/ https://www.jamf.com/blog/introducing-jamfs-ai-assistant/ https://www.jamf.com/blog/getting-to-know-declarative-management/   0:00 Introduction: Welcome Back from JNUC 2025 2:09 Cybersecurity Month Discussion 5:15 JNUC 2025 Highlights: Platform API & Blueprints 8:30 Platform SSO: The Future of Mac Identity Management 16:00 Jamf Account OIDC Migration Challenges 18:30 Blueprints Automated Software Updates 21:40 AI Assistant: Security Alerts & Configuration Analysis 32:15 Apple OS Updates: macOS Tahoe & iOS 18 35:05 Platform SSO vs Jamf Connect Strategy 39:40 Security Best Practices for Cybersecurity Month 44:20 New iPhone 16 Features & Hardware Security 47:00 Closing Thoughts & Resources   #Jamf #WorkBrew #Homebrew #MacAdmins #EndpointSecurity

200+ agents, 24/7 global coverage and AI assist. Explore how Jamf cut first response from 7 hours to under 10 minutes. Jamf After Dark hosts Kat Garbis and Josh Thornton sit down with Lisa Akerson (VP, Global Technical Support) and CJ Krueger (Sr. Program Manager, Technical Support) to unpack what's new in Jamf Support: an Intercom-powered omnichannel experience, AI assistance for common questions, and faster routing so customers reach the right expert, fast.   Highlights 200+ highly skilled support agents. Since the new portal launched June 20: 28,952 new support conversations and ~98,000 replies across chat/phone/email; 9,758 tickets for complex issues. AI Agent already resolved ~4,500 conversations (Standard Support chat). First response time improved from ~7 hours to after the Intercom move.   Guests Lisa Akerson, VP Global Technical Support at Jamf CJ Krueger, Sr. Program Manager, Technical Support at Jamf

Join co-hosts Josh Thornton and Kat Garbis along with members of the Jamf events team to discuss JNUC 2025. Jeff Ovik (Sr. Event Specialist) and Kelsey Dahl (Sr. Event Specialist) join the podcast to help discuss what listeners can expect at JNUC 2025. From hotel accommodations, things to do in Denver, Braindates, session topics, the Global Partner Summit, Level Up, and of course — the JNUC party, the team unpacks all the exciting things that will happen at JNUC.   Need help getting approval to go? The team discusses money saving strategies, JNUC value-adds, as well as the helpful "Convince Your Boss" letter.  Important links: Register for JNUC 2025 Grab cool JNUC 2025 Swag Store  

Join co-hosts Kat Garbis & Josh Thornton with Jamf guests, Iulia Arghir (Senior Product Manager) and Alexander Dove (Senior Sales Engineer) as they introduce and unpack the exciting details of a new feature, Network Relay.  Network Relay provides a modern VPN framework, built into the OS and deployable via MDM. Rather than replacing an existing VPN all together, Network Relay can work alongside it, securing admin specified destinations, helping modernize and better secure an existing infrastructure. Network Relay preserves the native Apple device experience that users expect. Some benefits are the support for app-specific, policy-driven tunneling, authenticated based on the hardware-attested device identity, ideal for Zero Trust as well as secure remote connectivity available out of the box.   Listen to the full episode to learn more!   Looking to sign up and be an early Network Relay adopter? Sign up here: https://forms.office.com/r/wfWk5RmMGc   Network Relay blog: https://www.jamf.com/blog/jamf-network-relay-service-mobile-secure-connectivity/

Join host, Kat Garbis, with special guest, Matt Jerome (Sr. Engineer Desktops, Fanatics) to discuss a common scenario in the Mac Admin world: inheriting a Jamf instance.  You didn't build the Jamf Pro instance — someone else did. Perhaps they built it but not quite in the way you would have done it.  Maybe the instance came through an acquisition, someone left the organization, regardless, this happens  and is usually met with some questions and requires a strategy to navigate. Matt Jerome has plenty of experience in this and created a process of how to navigate inheriting an instance. Matt shares steps he has found to be repeatable and guidance on how to make this as easy as possible.    Please find a list of cited resources in this episode: Tech Thoughts article: https://community.jamf.com/t5/tech-thoughts/from-huh-to-h-e-r-o/ba-p/341348 Installomator: https://github.com/Installomator/Installomator Setup your Mac: https://github.com/setup-your-mac/Setup-Your-Mac Nudge: https://github.com/macadmins/nudge Superman: https://github.com/Macjutsu/super App Auto Patch: https://github.com/App-Auto-Patch/App-Auto-Patch

Join co-hosts Kat Garbis & Sean Rabbitt with guest Isaac Ordonez of Mann Consulting, a Jamf Partner, to discuss what it is like to be a managed service provider (MSP) and provide insight on ways they leverage Jamf.  Isaac discusses unique ways they are supporting Jamf to help their customers achieve compliance, building applications and integrations, how they are doing reports for launch daemons.   

Co-hosts Kat Garbis and Sean Rabbitt are joined by Suraj Mohandas (Vice President of Product Strategy), Emily McRoberts-Froese (Sr. Education Leadership Executive), and John Wetter (Director of Technology & Information Services Hopkins Public Schools) to discuss the current landscape for admins supporting K-12 .    Meet John Wetter, an IT Professional, Jamf customer, and public speaker out of Minneapolis, joins the Jamf team to discuss the current changes and evolution of supporting K-12, including security, privacy, budget, AI initiatives and more.    The team leans on Wetter's experience to understand how they are navigating cyber and physical threats in K-12 schools, best practices in identity, if AI has a place in education, and advice to other IT professionals in the K-12 space. 

Join Kat and Sean to discuss some exciting updates: Jamf ID, Jamf Account, SSO, betas, Compliance Benchmarks, Blue Prints and so much more. They are joined by William (Bill Smith), Technical Enablement Manager III, to discuss upcoming changes, what's currently in betas and how partners and Jamf Admins can maximize benefits from these latest updates. The team also makes constant references to Severance the entire segment with nods to the recent Apple event.