What happens when an Apple Computer is quarantined?

Audience/Target Users

  • OneIT - Client Engagement Staff

What You Need Before You Start

  • Administrative access to the device
  • Access to the Jamf Pro inventory (for IT staff)

Steps to Complete the Task

If the Mac is quarantined or cannot access the Charlotte network, follow these steps to verify the authentication certificates. Note: Even when quarantined, the Mac can still communicate with the Jamf server to receive necessary configuration profiles.

Step-by-Step Instructions

  1. Check the Keychain for Certificates

    • Open Keychain Access on the Mac.

    • Look for a certificate labeled with the computer's hostname, model name, or DEP-Serial Number.

    • Uploaded Image (Thumbnail)​Uploaded Image (Thumbnail)Uploaded Image (Thumbnail)
  2. To Identify the valid certificate, click the drop-down arrow next to the certificate. A valid certificate will have a private key labeled: com.jamf.adcsintegration.privatekey.

  3. Remove Expired Certificates

    • If you see multiple certificates, delete any that are expired to prevent authentication conflicts.

  4. If a valid certificate is present in the keychain, refresh the 802.1x Connection

    • Navigate to System Settings > Network > Ethernet Connection > Details > 802.1x.

    • Uploaded Image (Thumbnail)

    • Click Disconnect - if connected, then click Reconnect.

  5. Verify IP and Certificate Selection

    • After reconnecting, check the IP address to see if it is now correct.

    • If the system asks to choose a certificate, select the one labeled with the hostname.

    • If the hostname certificate is not available, select the one labeled with the DEP-serial number or computer model.

    • Uploaded Image (Thumbnail)
    • Uploaded Image (Thumbnail)
       

  6. Other things to check

    • Look up the computer's inventory in Jamf and choose Profiles.

    • Check the Profiles List for the Settings labeled ADCS Client Enrollment & 802.1x Auth.

    • Uploaded Image (Thumbnail)

Important Notes or Exceptions

  • Authentication Requirement: A valid certificate is mandatory to securely connect to the Charlotte network via ethernet connection.

  • Jamf Communication: The device can typically still reach Jamf servers even while in a network quarantine state to receive profile updates.

Contact Information

If you still need help or cannot find a valid certificate, please contact the Service Desk at https://services.help.charlotte.edu/.

Print Article