I'm a former Windows user who recently bought a 15-inch MacBook Air M5 with 24GB of RAM and 1TB of storage to escape the hell that Windows has become.

I love this computer.

I currently have the latest version of macOS Golden Gate installed.

I installed Java 8 (from Oracle) update 511, and it added a section in the bottom left of System Settings, but when I click on it, it's completely blank, and I can't see any options in the Java Control Panel.

Are you experiencing this?.

It's a bug?

Is there a solution?

Because I've tried everything I can think of, and I can't fix it.

Thank you very much.

Best regards. de

We're mostly a windows shop but we also use Jamf Pro to support IOS and Mac devices.

How do you stay sane with the constant change?

PPPC profiles that worked for months now need adjustments with updates.

Printer Drivers that have been working just fine now suddenly don't work anymore and we're probably going to just end up having to create a driverless printing setup just for the Macs.

DDM, SSO, etc, etc. It's all so much 😭. Just constantly having to make adjustments to keep things stable.

Following up on the eMudhra intermediate-CA compromise. Apple's OS fix cleans the system trust and /etc/ssl/cert.pem — but it does NOT touch the CA bundles that individual Python installs vendor. On our fully-updated Mac, Apple's own /usr/bin/pip3 (Command Line Tools) ships certifi 2021.05.30, which still contains both roots the compromised intermediates chain to: "AAA Certificate Services" and "emSign ECC Root CA - G3". Xcode's bundled python and several app-bundled pythons are the same.

So `pip install` and anything using those interpreters can still trust the leaked roots, even though curl/git and your up-to-date venvs are clean.

Check each python you use (reads the file, changes nothing — match the two SPECIFIC roots, not just "emSign", since legit emSign roots are still in play):

BUNDLE=$(python3 -c 'import certifi; print(certifi.where())')

grep -E 'emSign ECC Root CA - G3|AAA Certificate Services' "$BUNDLE"

Any output = that interpreter still trusts them. What we saw on our Mac:

# /usr/bin/python3 (CLT) -> certifi 2021.05.30

# Subject: CN=AAA Certificate Services O=Comodo CA Limited

# Subject: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited

# ...meanwhile /etc/ssl/cert.pem (curl/git): 0 matches — clean

Gotcha that burned us: don't grep just "emSign" or trust the cert count — "AAA Certificate Services" was dropped from certifi before "emSign ... G3", so a bundle can look half-fixed. Match both exact names.

Fix: upgrade certifi (2026.10.19+) in each environment, or point SSL_CERT_FILE / REQUESTS_CA_BUNDLE at an updated bundle. For Apple's bundled pips you can't upgrade in place, use a venv with current certifi for anything that matters.

Anyone else seeing the 2021 certifi in CLT/Xcode pip? Curious how widespread this is.

On macOS 27.0.1, under System Settings > Privacy & Security > Files & Folders, I have an app (an MCP) listed with a sub-permission toggle called “Data shared by Things and affiliated apps” (the fine-grained inter-app data-sharing category, not classic Full Disk Access). The toggle won’t switch on no matter what I try; fully quitting the requesting app and confirming no helper processes remain in Activity Monitor, restarting System Settings, and a full reboot. Toggle is still stuck off. Tapping the toggle produces zero response (no password/Touch ID prompt, no animation, nothing). If i drag the toggle to the right it just bounce back to the off position.

The odd part: it’s not isolated to one app. A second, unrelated, properly-signed CLI tool (uvx, from the uv Python package manager) has the identical toggle, same category, also stuck off in the same pane. Both items otherwise show as correctly installed.

Anyone else hit this specific Files & Folders sub-toggle issue on 27.0.1? Known fix, or confirmed OS bug worth reporting?

we have multiple clients using okta for SSO to things, but very MS heavy using outlook, teams, etc all day.

with our biggest client, years ago, we used microsoft PSSO (com.microsoft.CompanyPortalMac.ssoextention), company portal app, etc despite them using Okta to SSO against everything

it never caused us any issues

now we have another client with Okta, they are asking specifically about Okta PSSO (com.okta.mobile.auth-service-extension) leveraging the Okta Verify app

I have the choice between using microsoft PSSO again, which is a known thing for us, or splitting off and using Okta PSSO for this client specifically. I don’t see or understand any benefits to using the Okta version

any thoughts? anyone else using the Microsoft one even with Okta for SSO to normal apps and sites. from what i understand , the MS method with company portal is still supported even with Okta in use

Hey all, some may remember me a while back posting about ScopeMap. Version 2.0 just dropped: https://github.com/Jamf-Concepts/scope-map

Notable changes:

All calls can be done using Platform API now
Blueprint information overhaul (including per app device status reporting that isn't in the Jamf GUI)

Flagging configuration profiles that have a DDM capable payload to alert you of ones that can/should be considered for moving to a blueprint

General UI and bug fixes

Hope it helps some of you guys out if you weren't aware of it and if you have it already make sure you update your version.

As always, any feedback is always welcome.

We've confirmed that sudo jamf recon is failing on multiple Macs, including both newly enrolled devices and previously healthy devices. jamf checkJSSConnection succeeds, and devices continue receiving policies and configuration profiles normally. However, inventory submission fails immediately after "Retrieving inventory preferences..." with the error "There was an error. Message has no content." This appears to be affecting inventory updates globally rather than being isolated to a specific device, as both our main office and remote users are experiencing the same issue. Has anyone else encountered this issue or identified a root cause or resolution?