Device Trust for macOS Registration Task Version History

1.3.2

This release includes internal code refactoring.

1.3.1

This release includes the following:

• In previous versions, the Registration Task was based on Python 2.7. Beginning with 1.3.1, the Registration Task is based on Python 3. This supports macOS 10.15.xx (Catalina) and above.

• Addresses the known issue of device enrollment failures.

This release includes the following:

• Previously, macOS prompted end users to reset the default keychain during Device Trust enrollment if the keychain was unavailable for some reason (corrupted or missing). Version 1.2.1 halts the enrollment process if the default keychain is unavailable and as a result, the user is not prompted to reset the keychain.
• In previous versions, the Registration Task update process unintentionally removed key material (client certificate, Okta keychain, keychain password) and the renewal task in cases when the update process itself failed for some reason, which un-enrolled currently-enrolled devices. Beginning with version 1.2.1, these items are no longer removed if the update process itself fails.
• Admins can now use the following query to determine the Registration Task version installed on the device.

python ~/Library/Okta/okta_device_trust.py version

This Generally Available release includes the following:

• Slack is added to the default app allowlist.
• The System Log now reports the DeviceDisplayName attribute in the DebugContext.
• Improvements to the logs the Device Registration Task publishes to Jamf Pro during deployment
• Internal fixes and performance enhancements

This first Early Access version provides several internal fixes and improvements.