Troubleshoot: Force the JumpCloud Agent to Reregister

If multiple devices are bound to your directory under the same System ID (often caused by cloning a device without stripping its identity first), you'll need to force the affected JumpCloud agents to reregister.

To reregister the agent, delete the existing mTLS client certificate and private key on the device, and then restart the agent. When the agent restarts, it cannot find a valid certificate and automatically reregisters with JumpCloud as a newly enrolled device.

Prerequisites:

• You must have administrative (sudo) privileges on affected devices to perform these actions.

macOS

To reregister the macOS agent:

1. On the Mac, open Terminal.
2. Run the following command to delete the client certificate and private key: sudo rm /opt/jc/client.crt /opt/jc/client.key
3. Run the following command to restart the agent: sudo launchctl stop com.jumpcloud.darwin-agent (The agent will restart automatically after being stopped).

Windows

To reregister the Windows agent:

1. On the Windows device, open File Explorer and navigate to the following directory: C:\Program Files\JumpCloud\Plugins\Contrib
2. Delete the client.crt and client.key files.
3. Open Command Prompt as an administrator.
4. Run the following commands to stop and restart the agent service:
   • sc stop jumpcloud-agent
   • sc start jumpcloud-agent

Linux

To reregister the Linux agent:

1. On the Linux device, open a terminal window.
2. Run the following command to delete the client certificate and private key: sudo rm /opt/jc/client.crt /opt/jc/client.key
3. Run the following command to restart the agent: sudo systemctl restart jcagent