Enrollment Profiles

Enrollment profiles are .mobileconfig files that allow you to enroll mobile devices with Jamf Pro. This involves creating an enrollment profile, connecting the devices to a computer via USB, and installing the enrollment profile using Apple Configurator.

When you create an enrollment profile using Jamf Pro, you can specify user and location information, purchasing information, and a site for mobile devices enrolled using the profile. To enroll mobile devices using Apple Configurator, you must download both the enrollment profile and its Trust Profile from Jamf Pro and import both profiles to Apple Configurator.

For information on how to install enrollment profiles using Apple Configurator, see the following Knowledge Base article:

Installing Enrollment Profiles Using Apple Configurator

Note: You cannot distribute an updated MDM profile via the Self Service web clip to mobile devices enrolled using an enrollment profile. For information on updating an MDM profile, see the following Knowledge Base article:

Distributing Updated MDM Profiles

Creating an Enrollment Profile for Use with Apple Configurator

  1. Log in to Jamf Pro.

  2. Click Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click New images/download/thumbnails/17121041/Icon_New_Button.png .

  5. Use the General pane to configure basic settings for the enrollment profile.

  6. (Optional) Click the User and Location Information tab and specify user and location information for the devices.

  7. (Optional) Click the Purchasing Information tab and specify purchasing information for the devices.

  8. (Optional) Click the Attachments tab and click Upload to upload an attachment.

  9. Click Save.

Downloading an Enrollment Profile

You need to download the enrollment profile (.mobileconfig) from Jamf Pro before using it to enroll mobile devices using Apple Configurator.

  1. Log in to Jamf Pro.

  2. Click Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click the enrollment profile you want to download.

  5. Click Download.
    On macOS 10.7 or later, you may be prompted to install the profile. Click Cancel to decline.

The enrollment profile downloads immediately as a .mobileconfig file.

Downloading a Trust Profile

The Trust Profile contains the CA certificate that establishes trust between the certificate authority (CA) and mobile devices.

When you create an enrollment profile for use with Apple Configurator, Jamf Pro automatically creates an associated Trust Profile. You need to download the Trust Profile (Trust Profile.mobileconfig) from Jamf Pro so that you can import it to Apple Configurator along with the enrollment profile.

  1. Log in to Jamf Pro.

  2. Click Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click the enrollment profile for which you want to download a Trust Profile.

  5. Click Trust Profile.
    On macOS 10.7 or later, you may be prompted to install the profile. Click Cancel to decline.

The Trust Profile downloads immediately with the filename Trust Profile.mobileconfig.

When the Trust Profile is imported to Apple Configurator, it displays in the Profiles list with a name that identifies it as the CA certificate profile.

Related Information

For related information, see the following Jamf Knowledge Base video:

Manually Enrolling iPads in Jamf Pro with Apple Configurator 2

For related information, see the following Knowledge Base article:

Components Installed on Mobile Devices
Learn about the components installed on mobile devices during enrollment.

For related information, see the following technical paper:

Deploying iOS Devices Using Apple Configurator 2 and Jamf Pro
Get step-by-step instructions on how to deploy iOS devices using Apple Configurator 2 and an enrollment profile.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2018 Jamf. All rights reserved.