Overview
Jamf has discovered three issues affecting devices running iOS/iPadOS 26.1:
Jamf Trust App configured with ODCF in Hidden-App Mode Results in Connectivity Loss.
Update Process of Jamf Trust App Configured with ODCF May Hang Resulting in Connectivity Loss.
Jamf Trust App configured with Zero Trust Network Access (ZTNA) in Hidden-App Mode Results in Resources Behind ZTNA to be Unavailable.
The behavior can occur with any on-device content filter or VPN deployed on iOS/iPadOS 26.1, across multiple MDM environments when used alongside Screen Time restrictions, App Usage controls, or Kiosk/Single App Mode.
If your devices have already been impacted by this issue, recovery requires a full device wipe and reinstall.
Expand for details on the three issues that have been identified.
Expand for details on the three issues that have been identified.
Jamf Trust App Configured with ODCF in Hidden-App Mode Results in Connectivity Loss - When the Jamf Trust app configured with ODCF (or alternative ODCF app) is put into hidden-app mode, the device loses internet connectivity.
Conditions to trigger the issue (all must apply):Device is running iOS 26.1 or iPadOS 26.1 and is configured with ODCF vectoring
Jamf Trust (or alternative ODCF app) deployed in a "hidden" state. This can occur when using Kiosk Mode, App Usage configurations, Allowed Content Rating, or Screen Time restrictions.
The device is restarted.
Outcome:
Device loses internet connectivity, including connection to the MDM.
Recovery requires a full device wipe and reinstall.
App Updates May Cause Connectivity Loss for On-Device Content Filters - An intermittent issue may cause the Jamf Trust app update to hang, which can result in a loss of internet connectivity.
Conditions to trigger the issue (all must apply):Device is running iOS/iPadOS 26.1 and is configured with and on-device content filter.
The filtering app is being updated.
The device is on an unstable or poor network connection (though this may not always be required).
Outcome:
The app installation process hangs indefinitely.
The device loses internet connectivity, which is not restored even after a reboot.
Note: This issue occurs intermittently. In most cases, the update succeeds even when all conditions are met.
Zero Trust Network Access (ZTNA) Functionality Is Affected if Jamf Trust is put into Hidden-App Mode - This issue impacts devices using ZTNA when the associated filtering app (Jamf Trust or other ODCF tools) is hidden or restricted.
Conditions to trigger the issue (all must apply):The device is running iOS/iPadOS 26.1.
Jamf Trust or any filtering app is hidden via MDM, Screen Time, or Kiosk/Single App mode.
Outcome:ZTNA continues to function normally until the device is rebooted or VPN is manually disabled in device settings.
Once disabled or rebooted, ZTNA cannot be re-enabled by the user.
Unlike the ODCF issue, the device retains network connectivity but cannot access resources protected by ZTNA.
When Jamf Trust is "unhidden," the VPN does not start automatically.
Note: The behavior can be inconsistent. In some instances, the VPN disconnects immediately when Jamf Trust is hidden and reconnects when it is unhidden.
We are continuing to work closely with Apple, who has identified and resolved the underlying root cause. A permanent fix will be included in an upcoming iOS/iPadOS release.
Updated Guidance
Until the next iOS/iPadOS update becomes broadly available, we recommend the following steps for any environment using on-device content filtering solutions:
Do not use Screen Time restrictions, App Usage controls, or Kiosk/Single App Mode to hide VPN and content filter apps on devices that are already running iOS 26.1.
Do not update devices to iOS/iPadOS 26.1 when an ODCF-based filtering or VPN tool is deployed.
Remain on iOS/iPadOS 26.0.x to avoid potential service disruption. Consider putting a deferral in place to ensure devices do not upgrade.
Using Jamf Pro blueprints you can set the deferral following the steps here.
If you don't meet the requirements for blueprints you can set the deferral following this method.
Thoroughly test the upcoming iOS/iPadOS release in pre-production environments before deploying at scale.
These recommendations apply across all MDM platforms and all on-device content filtering vendors. If you are using another MDM provider or a third-party ODCF solution, we recommend working directly with that vendor for platform-specific guidance and update deferral instructions.
This article is based on the Jamf Nation post: Further Update on Compatibility Issue Impacting Jamf Trust Hidden-App Mode in iOS 26.1.