Enrollment Profiles

Enrollment profiles are .mobileconfig files that allow you to enroll mobile devices with the Jamf Software Server (JSS). This involves creating an enrollment profile, connecting the devices to a computer via USB, and installing the enrollment profile using Apple Configurator or Apple’s iPhone Configuration Utility (iPCU).

You can use the JSS to create and download enrollment profiles. When you create an enrollment profile, you can specify user and location information, purchasing information, and a site for mobile devices enrolled using the profile.

Important: You cannot distribute an updated MDM profile via the Self Service web clip to mobile devices enrolled using an enrollment profile. For information on updating an MDM profile, see the following Knowledge Base article:

Distributing Updated MDM Profiles

Tools for Installing Enrollment Profiles

Before creating an enrollment profile, you need to decide which tool you will use to install the profile on mobile devices. The tool you use to install enrollment profiles affects the way you manage the profiles in the JSS.

The following tools can be used to install enrollment profiles:

  • Apple Configurator—By default, when you create an enrollment profile in the JSS, it is created for use with Apple Configurator. Before you can use Apple Configurator to enroll mobile devices, you need to download both the enrollment profile and its Trust Profile from the JSS so you can import these profiles to Apple Configurator.

  • iPCU—You should only create an enrollment profile for use with iPCU if you plan to install the profile on mobile devices with iOS 6 or earlier. Before you can use iPCU to enroll mobile devices, you need to download the enrollment profile from the JSS so you can import it to iPCU.

Note: Enrollment profiles created using the JSS v9.0 or earlier cannot be used to enroll mobile devices with iOS 7 or later. If you plan to enroll mobile devices with iOS 7 or later, you need to create a new enrollment profile following the instructions in the Creating an Enrollment Profile for Use with Apple Configurator section.

For information on how to install enrollment profiles using Apple Configurator or iPCU, see the following Knowledge Base article:

Installing Enrollment Profiles Using Apple Configurator or iPCU

Creating an Enrollment Profile for Use with Apple Configurator

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click New images/download/thumbnails/16429207/New_icon.png .

  5. Use the General pane to configure basic settings for the enrollment profile.
    Ensure that the Create profile for use with iPCU checkbox is not selected.

  6. (Optional) Click the User and Location Information tab and specify user and location information for the devices.

  7. (Optional) Click the Purchasing Information tab and specify purchasing information for the devices.

  8. (Optional) Click the Attachments tab and click Upload to upload an attachment.

  9. Click Save.

Creating an Enrollment Profile for Use with iPCU

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click New images/download/thumbnails/16429207/New_icon.png .

  5. Use the General pane to configure basic settings for the enrollment profile.

  6. Select the Create profile for use with iPCU checkbox and choose a target iOS version.
    The target iOS must match the iOS on the devices that you plan to enroll.

  7. (Optional) Click the User and Location Information tab and specify user and location information for the devices.

  8. (Optional) Click the Purchasing Information tab and specify purchasing information for the devices.

  9. (Optional) Click the Attachments tab and click Upload to upload an attachment.

  10. Click Save.

Downloading an Enrollment Profile

You need to download the enrollment profile (.mobileconfig) from the JSS before using it to enroll mobile devices using Apple Configurator or iPCU.

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click the enrollment profile you want to download.

  5. Click Download.
    On macOS 10.7 or later, you may be prompted to install the profile. Click Cancel to decline.

The enrollment profile downloads immediately as a .mobileconfig file.

Downloading a Trust Profile

The Trust Profile contains the CA certificate that establishes trust between the certificate authority (CA) and mobile devices.

When you create an enrollment profile for use with Apple Configurator, the JSS automatically creates an associated Trust Profile. You need to download the Trust Profile (Trust Profile.mobileconfig) from the JSS so that you can import it to Apple Configurator along with the enrollment profile.

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click Enrollment Profiles.

  4. Click the enrollment profile for which you want to download a Trust Profile.

  5. Click Trust Profile.
    On macOS 10.7 or later, you may be prompted to install the profile. Click Cancel to decline.

The Trust Profile downloads immediately with the filename Trust Profile.mobileconfig.

When the Trust Profile is imported to Apple Configurator, it displays in the Profiles list with a name that identifies it as the CA certificate profile.

Related Information

For related information, see the following Knowledge Base article:

Components Installed on Mobile Devices
Learn about the components installed on mobile devices during enrollment.

For related information, see the following technical paper:

Deploying iOS Devices Using Apple Configurator 2 and the Casper Suite
Get step-by-step instructions on how to deploy iOS devices using Apple Configurator 2 and an enrollment profile.

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.