Mobile Device PreStage Enrollments

A PreStage enrollment allows you to store enrollment and mobile device setup settings in Jamf Pro and use them to enroll new iOS and tvOS devices. This reduces the amount of time and interaction it takes to prepare mobile devices for use. For tvOS devices, this includes supervising devices, requiring users to apply the MDM profile for enrollment, and auto advancing through the Setup Assistant with optional settings to skip selected items during enrollment.

Before you can use a PreStage enrollment, you need to integrate Jamf Pro with the Device Enrollment Program (DEP). This creates an instance of DEP in Jamf Pro. (For more information, see Integrating with the Device Enrollment Program.) Only devices associated with a DEP instance can be enrolled with Jamf Pro using a PreStage enrollment.

After creating a DEP instance, you need to create a PreStage enrollment in Jamf Pro for the mobile devices you want to enroll. Creating a PreStage enrollment allows you to configure the enrollment settings and customize the user experience of the Setup Assistant. You can also specify the mobile devices that should be enrolled using the PreStage enrollment. In addition, you can specify that devices newly associated with the DEP instance be automatically added to the PreStage enrollment.

You can require users to authenticate during mobile device setup using an LDAP directory account or a Jamf Pro user account. If users authenticate with an LDAP directory account, user and location information is submitted during enrollment.

Requirements

To require LDAP users or Jamf Pro users to authenticate during mobile device setup, you need an LDAP server set up Jamf Pro. (For more information, see Integrating with LDAP Directory Services.) In addition, authentication requires mobile devices with iOS 7.1 or later, or Apple TV devices with tvOS 10.2 or later.

To enable Shared iPad, you need the following:

For more information on Shared iPad, see the following technical paper:
Supporting Apple’s Classroom App and Shared iPad Using Jamf Pro

Configuring a Mobile Device PreStage Enrollment

  1. Log in to Jamf Pro.

  2. Click Devices at the top of the page.

  3. Click PreStage Enrollments.

  4. Click New images/download/thumbnails/16440014/Icon_New_Button.png .

  5. Use the General payload to configure basic settings for the PreStage enrollment.
    To enable Shared iPad during enrollment, select Supervise Devices and then select Enable Shared iPad. You must also select the maximum number of user accounts that can be stored with Shared iPad using the Number of users pop-up menu. This limits the number of user accounts that can be stored locally on the iPad.
    To customize the user experience of the Setup Assistant, select which steps you want to skip in the Setup Assistant. If you choose to skip steps, the user can enable these settings after the device is configured unless otherwise restricted. For Apple TV devices, Ethernet connection is required.

  6. (Optional) Use the Mobile Device Names payload to choose a method for assigning names to mobile devices.
    This information is stored in Jamf Pro for each mobile device enrolled using a PreStage enrollment.
    The Mobile Device Names payload is only displayed if the Supervise Devices checkbox is selected.
    The List of Names naming method requires mobile devices with iOS 8 or later.

  7. (Optional) Use the User and Location payload to specify user and location information for the mobile devices.
    This information is stored in Jamf Pro for each mobile device enrolled using a PreStage enrollment.
    The User and Location Information payload is only displayed if the Require Authentication checkbox is not selected.

  8. (Optional) Use the Purchasing payload to specify purchasing information for the mobile devices.
    This information is stored in Jamf Pro for each mobile device enrolled using a PreStage enrollment.

  9. (Optional) Use the Attachments payload to upload attachments to store for mobile devices.
    This information is stored in Jamf Pro for each mobile device enrolled using a PreStage enrollment.

  10. If the SSL certificate you are using is signed by an external CA (your organization's CA or a trusted third-party CA), use the Certificates payload to upload a certificate for the CA that you want mobile devices to trust at enrollment.
    The anchor certificate is only displayed if the SSL certificate you are using is signed by the Jamf Pro built-in CA.

  11. Click the Scope tab and configure the scope of the PreStage enrollment by selecting the checkbox next to each mobile device you want to add to the scope.
    The mobile devices listed on the Scope tab are the mobile devices that are associated with the Device Enrollment Program (DEP) via the server token file (.p7m) you downloaded from the Apple Deployment Programs website.
    Note: If you want to add mobile devices to the scope automatically as the devices become associated with the DEP instance, select the Automatically assign new devices checkbox in the General payload.

  12. Click Save.

Refreshing PreStage Enrollment Information

Jamf Pro allows you to manually refresh information about the mobile devices in the PreStage enrollment as needed.

  1. Log in to Jamf Pro.

  2. Click Devices at the top of the page.

  3. Click PreStage Enrollments.

  4. Click the PreStage enrollment you want to refresh.

  5. Click Refresh.

If there is updated information about the mobile devices in DEP, this information is displayed in Jamf Pro.

Further Considerations

When cloning a PreStage enrollment, mobile devices in the scope of the original PreStage enrollment are not included in the scope of the cloned PreStage enrollment.

Related Information

For related information, see the following sections in this guide:

For related information, see the following Knowledge Base article:

Components Installed on Mobile Devices
Learn about the components installed on mobile devices during enrollment.

For related information, see the following technical paper:

Deploying iOS Devices Using Apple Configurator 2 and Jamf Pro
Get step-by-step instructions on how to deploy iOS devices using Apple Configurator 2 and a PreStage enrollment.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.