Enforce Zero Trust Across Your Apple Fleet with Jamf + Smallstep

Your Apple devices are already managed in Jamf’s “Device Inventory” — now we can use Smallstep to aggregate your “Trust Inventory.” To truly enforce Zero Trust, you need hardware-attested device identity that ties into Jamf directly to inventory the device hardware under management. In this live demo, we’ll show how Smallstep integrates with Jamf to: Secure TLS-based authentication with device-bound certificates, leveraging Secure Enclave on Apple hardware and Jamf’s management posture everywhere else. Enforce real-time policies that automatically grant or revoke access based on device health and cryptographic attestation—no manual approvals required. Extend trusted access across your stack, integrating with Okta, Zscaler, and other enforcement tools to cover every Apple device in your fleet.