Skip to main content
Jamf Nation, hosted by Jamf, is the largest Apple IT management community in the world. Dialog with your fellow IT professionals, gain insight about Apple device deployments, share best practices and bounce ideas off each other. Join the conversation.

Installing Enrollment Profiles Using Apple Configurator

Overview

Installing an enrollment profile on mobile devices using Apple Configurator allows you to apply settings, install apps, etc., during enrollment. This article explains how to install enrollment profiles using Apple Configurator, but it does not go into detail about the additional actions you can take on devices during enrollment.

For instructions on how to create an enrollment profile using Jamf Pro, see the Jamf Pro Administrator's Guide.

Note: Enrollment profiles created using Jamf Pro 9.0 or earlier cannot be used to enroll mobile devices with iOS 7 or later. If you plan to enroll mobile devices with iOS 7 or later, you need to create a new enrollment profile in Jamf Pro 9.1 or later and use Apple Configurator to install the profile.

Installing Enrollment Profiles Using Apple Configurator

Requirements

Installing an enrollment profile using Apple Configurator requires a computer with:

  • macOS 10.7–10.10
  • iTunes 10.6 or later
  • Apple Configurator v1.3–1.7.2

Procedures

Installing Enrollment Profiles Created Using Jamf Pro 9.1 or later

When you create an enrollment profile for use with Apple Configurator, Jamf Pro 9.1 or later automatically creates an associated Trust Profile (Trust Profile.mobileconfig). The Trust Profile contains the CA certificate that establishes trust between the certificate authority (CA) and mobile devices.

Before you can use Apple Configurator to enroll mobile devices, you need to download both the enrollment profile and its Trust Profile from Jamf Pro so you can import these profiles to Apple Configurator.

  1. Open Apple Configurator.
  2. Connect one or more devices to a USB port on the computer. Apple Configurator allows you to enroll up to 30 connected mobile devices at once.
  3. Click Prepare in the toolbar.
  4. Click Add (+) below the Profiles list and choose Import Profile. Then, select the Trust Profile (Trust Profile.mobileconfig) you previously downloaded from the JSS, and click Open. The Trust Profile displays in the Profiles list with a name that identifies it as the CA certificate profile.
  5. Click Add (+) below the Profiles list and choose Import Profile. Then, select the enrollment profile (.mobileconfig) you previously downloaded from the JSS, and click Open.
  6. In the Profiles list, select the checkbox next to each of the profiles you just imported.
  7. Configure additional options as needed.
  8. Click Prepare at the bottom of the window.

Installing Enrollment Profiles Created Using Jamf Pro 9.0 or Earlier

  1. Open Apple Configurator.
  2. Connect one or more devices to a USB port on the computer. Apple Configurator allows you to enroll up to 30 connected mobile devices at once.
  3. Click Prepare in the toolbar.
  4. If the enrollment profile you want to install is not already in the Profiles list, click Add (+) below the Profiles list and choose Import Profile. Then, select the enrollment profile (.mobileconfig) and click Open.
  5. Select the checkbox next to the enrollment profile.
  6. Configure additional options as needed.
  7. Click Prepare at the bottom of the window.

Additional Information

For more information on Apple Configurator, see the Apple Configurator Help documentation at:

http://help.apple.com/configurator/mac/1.0/

For a more complete, best-practice workflow for enrolling devices using Apple Configurator, see the Deploying iOS Devices with Apple Configurator and the Casper Suite technical paper for your version of Jamf Pro, available at:

http://www.jamfsoftware.com/technical-papers

Like Comment
Order by:
SOLVED Posted: by jeremy.logsdon

When creating an enrollment profile in the JSS, if checking the box to "Create profile for use with iPCU," the options for "Target iOS Version" do not include iOS 7.

I'm not sure if that matters, but I'm trying to figure out why I can use Apple Configurator to install the trust and enrollment profiles but the device does not successfully enroll (it does not appear in the JSS).

Like
SOLVED Posted: by calum_carey

Is this information still correct? as of ios7 and configuration 1.4.3
how does one install both the trust and the mdm profile on an unsupervised device?
It would seem that you can only install a single profile at a time through the prepare section of Configurator by holding down the option key and selecting install profiles.
As per this KB this also seems to be the case \- http://support.apple.com/kb/HT5833
This has severly impacted my workflow. I was sure that in ios 6.1.3 and configurator 1.2 or 1.3 that i could install multiple profiles on a unsupervised device... but i could be wrong

Like
SOLVED Posted: by lunddal

The information in this article needs to be updated to reflect the changes in Configurator 1.5.

Like

Jamf wants to hear your feedback around Jamf Pro: LDAP Servers and Reports!