Apple Configurator 2 Enrollment

Apple Configurator 2 allows you to enroll iOS and tvOS devices in Jamf School if the devices are not eligible for Automated Device Enrollment (formerly DEP), such as donated devices. By enrolling with Apple Configurator 2, the devices are enrolled in Jamf School as supervised or via Automated Device Enrollment. To enroll devices using Apple Configurator 2, you must first create Blueprints to assign to devices. Blueprints are used to configure enrollment settings, such as device supervision, and for adding the devices to Apple School Manager.

Enrolling devices as supervised in Jamf School using Apple Configurator 2 involves the following steps:

  1. Create supervision Blueprints in Apple Configurator 2.

  2. Assign Blueprints to a device in Apple Configurator 2.

Enrolling devices via Automated Device Enrollment in Jamf School using Apple Configurator 2 involves the following steps:

  1. Create Automated Device Enrollment Blueprints in Apple Configurator 2.

  2. Assign Blueprints to a device in Apple Configurator 2.

  3. Move the devices from the Apple Configurator 2 server in Apple School Manager to the Jamf School server.

  4. Wipe the devices and enroll them in Jamf School using Automated Device Enrollment (formerly DEP).

Important: With manual device enrollment, a 30-day provisional period begins once a device is activated. During that period, users can remove their devices from enrollment, supervision, and MDM.

General Requirements

To enroll a device in Jamf School using Apple Configurator 2, you need:

  • A Mac computer with Apple Configurator 2 installed

  • Mobile devices with iOS 11 or later

  • Apple TV devices with tvOS 11 or later

  • (Optional) A USB hub to configure multiple iOS devices at once

  • (Automated Device Enrollment only) A server token uploaded to Jamf School (For more information, see Integrating Jamf School with Apple School Manager.)

To require authentication during enrollment, you must configure authentication settings. For more information, see the following sections in this guide:

If the devices were previously enrolled in another MDM, you must remove the MDM profile before using Apple Configurator 2 enrollment. For more information, see Removing an MDM Profile Manually.

Creating Blueprints

  1. Apple Configurator 2, navigate to Blueprints > Edit Blueprints > New.

  2. Enter a name.

  3. Select the Blueprints and click Prepare.

  4. Choose “Manual Configuration” from the Prepare with pop-up menu option.

  5. (Automated Device Enrollment only) Select the Add to Apple School Manager or Apple Business Manager checkbox.

    Note: If you have a new or existing device that requires unique user authentication to enroll in Jamf School, it is recommended that you deselect the Activate and complete enrollment checkbox. The device remains on the Setup Assistant, and the user completes the enrollment.

  6. Select the Supervise devices checkbox.

    Note: Select the Allow devices to pair with other computers checkbox if you want users to use a USB cable to sync with a computer. If you deselect this checkbox and want to sync with a computer, you must erase, prepare, and supervise the devices before enrolling them again.

  7. Click Next.

  8. Choose “New server…” from the Server pop-up menu and click Next.

  9. Enter a name for the server in the Name field.

  10. Enter the Jamf School enrollment URL in the Host name or URL field.
    You can find the enrollment URL by navigating to Devices > Enroll Device(s) > Apple Configurator 2 (iOS) in Jamf School.

  11. Click Next.

  12. Choose “*.jamfcloud.com” as the anchor certificate and click Next.

  13. Sign in with the Apple ID you use for Apple School Manager or skip the sign in if you are only creating supervision Blueprints.

  14. Create a new organization by doing one of the following:

    1. If you have not set up an organization in Apple Configurator 2, enter information about your organization in the fields.

    2. If you already set up an organization in Apple Configurator 2, choose "New organization" from the Organization pop-up menu and enter information about your organization in the fields.

  15. Click Next.

  16. Choose Generate a new supervision identity and click Next.

  17. (Optional) Choose which steps will be presented to the user during the Setup Assistant, and then click Prepare. For more information on the Setup Assistant steps, see Setup Assistant screens in Apple's Mobile Device Management Settings.

    Note: It is recommended that you enable Location Services to ensure devices use the correct timezone and region.

  18. (macOS 10.15 or later only) When prompted to enter credentials to change certificate trust settings, enter the computer's keychain password and click Update Settings.

  19. Click Done to save the Blueprints.

Assigning Blueprints to Devices

  1. In Apple Configurator 2, connect one or more devices to the computer with Apple Configurator 2 installed.

  2. Select the devices you want to enroll in Jamf School.

  3. Control-click the devices, and then click Apply and select the Blueprints you want to apply to the devices.

    Warning: Preparing devices may take a few minutes. If you try to cancel or stop the process, Apple Configurator 2 takes the time necessary to safely terminate all operations. To avoid damaging the devices, do not shut down the computer running Apple Configurator 2 while it is preparing devices.

Based on the Blueprints that were assigned, one of the following will happen:

  • If you assigned supervision Blueprints to a device, the user will be prompted to allow Remote Management and go through the selected Setup Assistant steps. Then Apple Configurator 2 will automatically download and install the latest version of iOS, supervise the device, and enroll it in Jamf School.

  • If you assigned Automated Device Enrollment (Device Enrollment Program) Blueprints to a device, you must move the device to the Jamf School server in Apple School Manager before it enrolls in Jamf School. After Automated Device Enrollment (Device Enrollment Program) Blueprints are assigned to a device, the device is assigned to a server named “Apple Configurator 2” in Apple School Manager. You can then re-assign the device to your Jamf School server. After assigning a device to the Jamf School server, any settings applied by Apple Configurator 2 are no longer used for enrollment. For more information, see Assign, reassign, or unassign devices in Apple School Manager in the Apple School Manager User Guide. You may need to refresh the list of devices in Jamf School before the newly added devices appear. After moving the device to the Jamf School server in Apple School Manager, you must wipe the device before you can enroll it in Jamf School using Automated Device Enrollment (formerly DEP). For more information, see Automated Device Enrollment.

Best Practice: Zero-Touch Deployment with Apple Configurator 2 and Jamf School

Best practice workflows cover common scenarios; however, the following recommendations may not apply in your environment.

  1. In Jamf School, create an Automated Device Enrollment profile for iOS devices, ensuring the Skip All Steps checkbox is selected when configuring the profile for a zero-touch user experience. For more information about how to create an Automated Device Enrollment profile, see Automated Device Enrollment.
    Important: Many apps require Location Services to be enabled. By skipping all Setup Assistant steps, Location Services must be manually enabled after enrollment to use these apps or you can only enable the Location Services Setup Assistant step and skip the rest of the steps.

  2. To ensure mobile devices are connected to a network during enrollment, you must either create a Wi-Fi profile scoped to the devices or share the internet connection on a computer. For more information, see Configuring a Wi-Fi Profile or Share the internet connection on a Mac with other network users in Apple's macOS User Guide.

  3. In Apple Configurator 2, connect one or more devices to the computer with Apple Configurator 2 installed.

  4. Press command-A to select all the devices.

  5. Control-click and select Prepare Devices using Automated Enrollment.

  6. Click Next.

  7. (Optional) If you are using authentication, select the Automated Device Enrollment credentials.

  8. Click Prepare. A warning will display with the following message: "Configurator could not perform the requested action because “iPad” has already been prepared."
    Note: This warning displays because this action will erase all data on the device. If you want to retain the data, ensure the device is backed up.

  9. Click Erase.

Apple Configurator 2 restores the device and uses the information provided to enroll it in Jamf School.



Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2021 Jamf. All rights reserved.