Apple Configurator 2 Enrollment

Apple Configurator 2 allows you to enroll iOS and tvOS devices in Jamf School if the devices are not eligible for Automated Device Enrollment (formerly DEP), such as donated devices. By enrolling with Apple Configurator 2, the devices are enrolled in Jamf School as supervised or via Automated Device Enrollment. To enroll devices using Apple Configurator 2, you must first create a Blueprint to assign to devices. Blueprints are used to configure enrollment settings, such as device supervision, and for adding the devices to Apple School Manager.

Enrolling devices as supervised in Jamf School using Apple Configurator 2 involves the following steps:

  1. Create a supervision Blueprint in Apple Configurator 2.

  2. Assign the Blueprint to a device in Apple Configurator 2.

Enrolling devices via Automated Device Enrollment in Jamf School using Apple Configurator 2 involves the following steps:

  1. Create an Automated Device Enrollment Blueprint in Apple Configurator 2.

  2. Assign the Blueprint to a device in Apple Configurator 2.

  3. Move the devices from the Apple Configurator 2 server in Apple School Manager to the Jamf School server.

  4. Wipe the devices and enroll them in Jamf School using Automated Device Enrollment (formerly DEP).

Important: With manual device enrollment, a 30-day provisional period begins once a device is activated. During that period, users can remove their devices from enrollment, supervision, and MDM.

Requirements

To enroll a device in Jamf School using Apple Configurator 2, you need:

  • A Mac computer with Apple Configurator 2 installed

  • Mobile devices with iOS 11 or later

  • Apple TV devices with tvOS 11 or later

  • (Optional) A USB hub to configure multiple iOS devices at once

  • (Automated Device Enrollment only) A server token uploaded to Jamf School (For more information, see Integrating Jamf School with Apple School Manager.)

To require authentication during enrollment, you must configure authentication settings. For more information, see the following sections in this guide:

Creating a Blueprint

  1. Apple Configurator 2, navigate to Blueprints > Edit Blueprints > New.

  2. Enter a name for the Blueprint.

  3. Select the Blueprint and click Prepare.

  4. Choose “Manual Configuration” from the Prepare with pop-up menu option.

  5. (Automated Device Enrollment only) Select the Add to Device Enrollment Program checkbox.

    Note: If you have a new or existing device that requires unique user authentication to enroll in Jamf School, it is recommended that you deselect the Activate and complete enrollment checkbox. The device remains on the Setup Assistant, and the user completes the enrollment.

  6. Select the Supervise devices checkbox.

    Note: Select the Allow devices to pair with other computers checkbox if you want users to use a USB cable to sync with a computer. If you deselect this checkbox and want to sync with a computer, you must erase, prepare, and supervise the devices before enrolling them again.

  7. Click Next.

  8. Choose “New server…” from the Server pop-up menu and click Next.

  9. Enter a name for the server in the Name field.

  10. Enter the Jamf School enrollment URL in the Host name or URL field.
    You can find the enrollment URL by navigating to Devices > Enroll Device(s) > Apple Configurator 2 (iOS) in Jamf School.

  11. Click Next.

  12. Choose “*.jamfcloud.com” as the anchor certificate and click Next.

  13. Sign in with the Apple ID you use for Apple School Manager or skip the sign in if you are only creating a supervision Blueprint.

  14. Create a new organization by doing one of the following:

    1. If you have not set up an organization in Apple Configurator 2, enter information about your organization in the fields.

    2. If you already set up an organization in Apple Configurator 2, choose "New organization" from the Organization pop-up menu and enter information about your organization in the fields.

  15. Click Next.

  16. Choose Generate a new supervision identity and click Next.

  17. (Optional) Choose which steps will be presented to the user during the Setup Assistant, and then click Prepare. For more information on the Setup Assistant steps, see Setup Assistant screens in Apple's Mobile Device Management Settings.

    Note: It is recommended that you enable Location Services to ensure devices use the correct timezone and region.

  18. (macOS 10.15 or later only) When prompted to enter credentials to change certificate trust settings, enter the computer's keychain password and click Update Settings.

  19. Click Done to save the Blueprint.

Assigning the Blueprint to Devices

  1. In Apple Configurator 2, connect one or more devices to the computer with Apple Configurator 2 installed.

  2. Select the devices you want to enroll in Jamf School.

  3. Control-click the devices, and then click Apply and select the Blueprint you want to apply to the devices.

    Warning: Preparing devices may take a few minutes. If you try to cancel or stop the process, Apple Configurator 2 takes the time necessary to safely terminate all operations. To avoid damaging the devices, do not shut down the computer running Apple Configurator 2 while it is preparing devices.

If you assigned a supervision Blueprint to a device, the user will be prompted to allow Remote Management and go through the selected Setup Assistant steps. Then Apple Configurator 2 will automatically download and install the latest version of iOS, supervise the device, and enroll it in Jamf School.

If you assigned an Automated Device Enrollment (Device Enrollment Program) Blueprint to a device, you must move the device to the Jamf School server in Apple School Manager before it enrolls in Jamf School.

Moving Devices to the Jamf School Server

After an Automated Device Enrollment (Device Enrollment Program) Blueprint is assigned to a device, the device is assigned to a server named “Apple Configurator 2” in Apple School Manager. You can then re-assign the device to your Jamf School server. After assigning a device to the Jamf School server, any settings applied by Apple Configurator 2 are no longer used for enrollment.

Important: You may need to refresh the list of devices in Jamf School before the newly added devices appear.

After moving the device to the Jamf School server in Apple School Manager, you must wipe the device before you can enroll it in Jamf School using Automated Device Enrollment (formerly DEP). For more information, see Automated Device Enrollment.


Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2019 Jamf. All rights reserved.