The following components are installed on mobile devices during enrollment:
MDM Profile—This profile includes a SCEP enrollment request and an MDM enrollment request.
Trust Profile—This profile contains the CA certificate. The CA certificate establishes trust between the certificate authority (CA) and mobile devices. If you enrolled mobile devices using a PreStage enrollment, or using Apple Configurator and an enrollment URL, the Trust Profile is not a separate profile and it is contained within the MDM Profile.
Device certificate—This certificate verifies the identity of managed mobile devices each time they communicate with Jamf Pro.
Jamf Self Service for iOS—Jamf Self Service for iOS allows you to distribute iOS configuration profiles, apps, and books to mobile devices for users to install. Users tap the app to browse and then install items using an interface similar to the App Store.
Note: If you have upgraded from Jamf Pro 9.3x or earlier, the Self Service web clip is installed on all managed mobile devices except Apple TV devices by default. You can prevent Jamf Self Service for iOS from being installed on mobile devices if necessary. (For more information, see Jamf Self Service for iOS.)
Note: Jamf Self Service for iOS is not installed on Apple TV devices or personally owned devices.