A while back, I wrote about how you could use the Jamf Pro API to download installer packages from a JCDS2 distribution point. 

However, installer packages are not the only items which may be stored on a JCDS2 distribution point. The IPA files used by in-house iOS, iPadOS and tvOS devices may also be stored for distribution on a JCDS2 distribution point. IPA files stored on a JCDS2 distribution point can be accessed for download in the same way that installer packages can.

For those who want to use this capability, I’ve written a script which uses the Jamf Pro Classic API and Jamf Pro API to get the list of IPA files on a Jamf Pro server, retrieve the associated download links and download the IPA files to a directory on my Mac. For more details, please see below the jump.

Pre-requisites:

If setting up a specific Jamf Pro user account for this purpose with limited rights, here are the required API privileges for the account on the Jamf Pro server:

Jamf Pro Server Objects:

• Mobile Device Apps: Read
• Jamf Content Distribution Server Files: Read

For authentication, the script can accept manual input or values stored in a ~/Library/Preferences/com.github.jamfpro-info.plist file. The plist file can be created by running the following commands and substituting your own values where appropriate:

To store the Jamf Pro URL in the plist file:

To store the account username in the plist file:

To store the account password in the plist file:

Usage: 

/path/to/Jamf_Pro_JCDS_Mobile_InHouseIPA_Download.sh

The script takes the following actions:

1. Creates a download directory if none has been specified in the script.
2. Uses the Jamf Pro Classic API to download the list of mobile device applications from the Jamf Pro server.
3. Gets the Jamf Pro ID numbers for the individual IPA files.
4. Uses the Jamf Pro Classic API to get the names of the individual IPA files.
5. Uses the Jamf Pro API to get the MD5 hash of the individual IPA files.
6. Checks to see if a file with a matching name and MD5 hash exists in the download directory.
7. If a file with a matching name and MD5 hash exists in the download directory, display a message that the file exists in the download directory.
8. If a file with a matching name and MD5 hash does not exist in the download directory, use the Jamf Pro API to query the JCDS2 distribution point for the download URL of the IPA file and download the IPA file.

The script should provide output similar to this:

Downloading new copies of the IPA files where no copies currently exist:

Verifying existing copies of the IPA files exist and have MD5 hashes that match the IPA files stored in Jamf Pro:

Verifying existing copies of the IPA files exist and detecting copies that do not have MD5 hashes that match the IPA files stored in Jamf Pro:

This script is available from GitHub at the following location:

https://github.com/rtrouton/rtrouton_scripts/tree/main/rtrouton_scripts/Casper_Scripts/Jamf_Pro_JCDS_Mobile_InHouseIPA_Download/user_account_authentication

A version which uses API client authentication is available from GitHub at the following location:

https://github.com/rtrouton/rtrouton_scripts/tree/main/rtrouton_scripts/Casper_Scripts/Jamf_Pro_JCDS_Mobile_InHouseIPA_Download/API_client_authentication

Both scripts can be accessed via the following link:

https://github.com/rtrouton/rtrouton_scripts/tree/main/rtrouton_scripts/Casper_Scripts/Jamf_Pro_JCDS_Mobile_InHouseIPA_Download