From 7a695b8b544004fc5b0d614e043cb243fb8a3240 Mon Sep 17 00:00:00 2001
From: Adrian-Warren-jamf <adrian.warren@jamf.com>
Date: Fri, 24 Jul 2026 16:56:20 +0100
Subject: [PATCH] Add Jamf Trust Scripts for silent activation for inc-337

This script creates an init.json file in the JamfTrust Global folder and restarts the JamfTrust service for silent activation. It must be run with administrator rights and contains hardcoded activation parameters.
---
 support/Jamf Trust Scripts | 101 +++++++++++++++++++++++++++++++++++++
 1 file changed, 101 insertions(+)
 create mode 100644 support/Jamf Trust Scripts

diff --git a/support/Jamf Trust Scripts b/support/Jamf Trust Scripts
new file mode 100644
index 0000000..02f0eef
--- /dev/null
+++ b/support/Jamf Trust Scripts	
@@ -0,0 +1,101 @@
+<#
+.SYNOPSIS
+    Creates an init.json file in the JamfTrust Global folder and restarts the service to trigger silent activation.
+
+.DESCRIPTION
+    Writes an init.json file into C:\ProgramData\JamfTrust\Global (the location the
+    service reads via IConfigurationProvider.GetJamfTrustGlobalDirectory()). On startup
+    the ActivationActor pops these registration parameters and performs silent activation,
+    then deletes the file. Once the file is created, the JamfTrust service is restarted.
+
+    Must be executed with administrator rights since the JamfTrust folder is protected.
+
+    This variant takes no parameters; the activation values are hardcoded below so the
+    script can be deployed as-is (e.g. an Intune platform script or a Win32 PowerShell
+    script installer type, neither of which accepts command-line arguments).
+
+.NOTES
+    Error codes are based on
+    https://learn.microsoft.com/en-gb/windows/win32/debug/system-error-codes--0-499-
+        Error code 0   - ERROR_SUCCESS
+        Error code 352 - ERROR_FAIL_RESTART
+#>
+
+<# Hardcoded activation parameters #>
+$SecretKey             = "" #Taken from secure cloud (radar) deployment screen under specific activation link
+$ApiKey                = "" #Taken from secure cloud (radar) deployment screen under specific activation link
+$ActivationProfileLink = "" #Taken from secure cloud (radar) example https://e.wandera.com/test
+$NoPii                 = $false #leave as is
+
+$global_folder = "C:\ProgramData\JamfTrust\Global"
+$service_name  = "JamfTrust"
+
+<# init.json content #>
+function New-InitJson {
+    param(
+        [string]$GlobalFolder,
+        [string]$SecretKey,
+        [string]$ApiKey,
+        [string]$ActivationProfileLink,
+        [bool]$NoPii
+    )
+
+    # Fields and casing mirror the installer's RegistrationParameters DTO
+    # (JamfTrust.Client.Windows.Installer/Models/RegistrationParameter.cs),
+    # which is serialized with default Newtonsoft (PascalCase) into init.json.
+    $init_json = [ordered]@{
+        SecretKey             = $SecretKey
+        ApiKey                = $ApiKey
+        ActivationProfileLink = $ActivationProfileLink
+        NoPii                 = $NoPii
+    }
+
+    $init_json_file = [pscustomobject]$init_json
+
+    if (-not (Test-Path $GlobalFolder)) {
+        New-Item -ItemType Directory -Path $GlobalFolder | Out-Null
+    }
+
+    $init_json_path = Join-Path $GlobalFolder "init.json"
+
+    Write-Host "Creating init.json at $init_json_path"
+    $init_json_file | ConvertTo-Json -Depth 100 | Out-File -FilePath $init_json_path -Encoding utf8
+}
+
+<# Restart the JamfTrust service #>
+function Restart-JamfTrust {
+    Write-Host "Restarting JamfTrust UI and Service"
+
+    net stop JamfTrust
+    taskkill /F /IM JamfTrust.Client.Windows.UI.exe
+
+    net start JamfTrust
+
+    $limit = (Get-Date).AddMinutes(1)
+
+    while ((Get-Date) -le $limit) {
+        $service_status = Get-Service -Name $service_name
+        if ($service_status.Status -eq 'Running') {
+            Write-Host "Service is running"
+            return
+        }
+
+        Start-Sleep -Seconds 1
+    }
+
+    Write-Error -Message "Script failed to restart the service" -Category InvalidOperation -ErrorId 352
+    exit(352)
+}
+
+<#----------------------------------------#>
+
+New-InitJson -GlobalFolder $global_folder `
+             -SecretKey $SecretKey `
+             -ApiKey $ApiKey `
+             -ActivationProfileLink $ActivationProfileLink `
+             -NoPii $NoPii
+
+Restart-JamfTrust
+
+Write-Host "Done. init.json created in Global folder and service restarted."
+exit(0)