Supervision Identities

If you plan to supervise devices and deploy them using Apple Configurator 2 and the Casper Suite, you can use a supervision identity to pair supervised devices with multiple Apple Configurator 2 workstations that have the same supervision identity. A supervision identity can be applied to a device by pairing the device with an Apple Configurator 2 workstation or by enrolling the device with the JSS using a PreStage enrollment configured with a DEP instance that has a supervision identity.

A supervision identity certificate (.p12 file) can be created in the JSS or created in Apple Configurator 2 and then uploaded to the JSS. The identity can then be stored in the JSS until you need to download it and add it to other Apple Configurator 2 workstations, or add it to a DEP instance for use with a PreStage enrollment.

Note: To ensure devices are paired securely with each Apple Configurator 2 workstation, the workstations you are using must have matching supervision identities. If the wrong identity is applied to a device, the device must be wiped, re-supervised, and re-enrolled to change the identity.

For more information about supervision identities, see Apple's Configurator 2 Help documentation at:

http://help.apple.com/configurator/mac

For step-by-step instructions on how to use supervision identities while deploying mobile devices using Apple Configurator 2, see the following technical paper:

Deploying iOS Devices with Apple Configurator 2 and the Casper Suite

Requirements

To use supervision identities, you need:

  • Supervised devices with iOS 9 or later, or tvOS 10.2 or later

  • Apple Configurator 2.0 or 2.1

Creating a Supervision Identity

You can create a supervision identity in the JSS for use with Apple Configurator 2.

  1. Log in to the JSS with a web browser.

  2. In the top-right corner of the page, click Settings images/download/thumbnails/11273193/Settings_icon.png .

  3. Click Mobile Device Management.

  4. Click Apple Configurator Enrollment images/download/thumbnails/11272205/Apple_Configurator_Enrollment.png .

  5. Click the Supervision Identities tab, and then click Edit.

  6. Click New.

  7. Configure the supervision identity using the fields on the pane.

  8. Click Save.

Uploading a Supervision Identity

If you created a supervision identity using Apple Configurator 2, you can upload that identity to the JSS so it can be accessed from other Apple Configurator 2 workstations or added to a DEP instance.

  1. Log in to the JSS with a web browser.

  2. In the top-right corner of the page, click Settings images/download/thumbnails/11273193/Settings_icon.png .

  3. Click Mobile Device Management.

  4. Click Apple Configurator Enrollment images/download/thumbnails/11272205/Apple_Configurator_Enrollment.png .

  5. Click the Supervision Identities tab, and then click Edit.

  6. Click Upload.

  7. Click Upload Supervision Identity and upload the supervision identity (.p12).

  8. Configure the supervision identity using the fields on the pane.

  9. Click Save.

Downloading a Supervision Identity

You can download a supervision identity from the JSS and add it to the Apple Configurator 2 workstations that you want your devices with the same supervision identity to trust.

  1. Log in to the JSS with a web browser.

  2. In the top-right corner of the page, click Settings images/download/thumbnails/11273193/Settings_icon.png .

  3. Click Mobile Device Management.

  4. Click Apple Configurator Enrollment images/download/thumbnails/11272205/Apple_Configurator_Enrollment.png .

  5. Click the Supervision Identities tab.

  6. Click View next to the supervision identity you want to download.

  7. Click Download.

  8. Click Done.

Adding a Supervision Identity to a DEP Instance

When you add a supervision identity to a DEP instance, that identity is applied to all devices enrolled using a PreStage enrollment that is configured with the DEP instance.

Note: Devices that are already enrolled with the JSS and associated with a DEP instance need to be re-enrolled to become associated with the supervision identity for that DEP instance.

  1. Log in to the JSS with a web browser.

  2. In the top-right corner of the page, click Settings images/download/thumbnails/11273193/Settings_icon.png .

  3. Click Global Management.

  4. Click Device Enrollment Program images/download/thumbnails/11273193/Device_Enrollment_Program.png .

  5. Click the DEP instance you want to add a supervision identity to.

  6. Click Edit.

  7. Select the supervision identity you want to add from the Supervision Identity for Use with Apple Configurator pop-up menu.

  8. Click Save.

Related Information

For related information, see the following sections in this guide:

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.