Removing Devices from Jamf Security Cloud
- Last UpdatedAug 29, 2024
- 3 minute read
Removing a device record from Jamf Security Cloud under permanently deletes devices.
Deleting a device will prevent policies from being applied to it and it will move the device record to the Deleted devices list. A permanently deleted device will no longer be visible in any reports, so it will show up as a blank record.
Re-enrolling Devices
If you want to re-enroll a device without creating a new device record, you must first permanently delete the original record from Jamf Security Cloud. If UEM sync is enabled, you must also move the device into trash in your UEM service and then back out again.
Complete the following before removing devices from Jamf Security Cloud:
For managed devices, remove the devices from your UEM solution (this also removes the Jamf Trust app on iOS and iPadOS devices). For more information, see .
For unmanaged devices, uninstall the Jamf Trust app from the devices. The steps for uninstalling an app vary by platform. Refer to the documentation for your platform for instructions on how to uninstall an app.
Jamf Trust must be uninstalled from a managed device before deleting the device record in Jamf Security Cloud, otherwise the device record may be recreated automatically.
Reenrolling Devices
You must wait for 5 minutes before attempting to reenroll managed devices in your UEM.
A stale device is one that is no longer in use and therefore no longer needs to be in Jamf Security Cloud. You can perform a bulk delete operation that removes all devices that have had no network activity since a specified date, no app activity since a specified date, or that joined Jamf Security Cloud earlier than a specified date.
- In your Jamf Security Cloud portal, navigate to .
- Select Delete stale devices.
- Under Define criteria for stale devices, select the criteria that should be used to identify stale devices.
- For each selected criteria, choose a date in the date picker.
- Click Next.
- Review the changes and then click Delete.
Devices that meet the stale device criteria are permanently deleted from Jamf Security Cloud.
Jamf Security Cloud does not support changing the configuration of deployed devices. To change the configuration, you must redeploy the device. You can redeploy a managed device with a new Activation Profile by replacing the configuration profile in your UEM with a new one. The existing device record is automatically deleted from Jamf Security Cloud when the device is redeployed. It removes the history and data, and creates a new record.
Redeployment removes data usage history, so if you are using data capping, consider your billing period when making configuration changes to managed devices.
On unmanaged iOS or iPadOS devices deployed with our legacy APN (Advanced) proxy profile, the user may have to enter a unique profile removal code to fully remove Jamf Trust.
Administrators can find the profile removal codes within the section. To export a list of all profile removal codes, they can use the Export Devices functionality. It is also possible to do this for already deleted devices.
When deleting an unmanaged iOS or iPadOS device, Jamf recommends selecting the option to send removal instructions to the users. These instructions will include the unique removal PIN that allows the user to fully remove the Jamf Trust.