Downloading a Supervision Identity for Use in Apple Configurator 2

If you plan to supervise devices and deploy them using Apple Configurator 2 and Jamf School, you can use a supervision identity to pair supervised devices with multiple Apple Configurator 2 workstations that have the same supervision identity. A supervision identity is used to allow pairing with computers even if the Automated Device Enrollment profile (DEP profile) prohibits pairing with other computers. The supervision identity is a certificate and private key that can be imported into Apple Configurator 2. Once imported, the device will be able to pair with that given computer.

For more information, see Apple's Apple Configurator 2 User Guide.

Requirements

To download a supervision identity to use in Apple Configurator 2, you need:

  • A computer with Apple Configurator 2.0 or 2.1

  • An Apple School Manager account

  • Supervised mobile devices with iOS 9 or later, or tvOS 10.2 or later

Importing the Supervision Identity in Apple Configurator 2

  1. In Jamf School, navigate to Organization > Settings in the sidebar.
    Here, you will see your information and you will be able to download the identity. Take note of the "Generated on" date.

  2. Use the Jamf School Student payload to configure management settings in the Features section.

    Note: Before downloading a supervision identity on a device, you must redistribute the Automated Device Enrollment Profile (DEP profile) and re-enroll the device. For more information, see Creating and Distributing Profiles.


    All devices enrolled before this date will not work with the generated supervision identity.

  3. Click Download Supervision Identity.

When you download and open the supervision identity (this is a .organization file), the supervision identity should automatically open in Apple Configurator 2.

Note: You will be asked to enter a password for this supervision identity. This password is found on the same page as where you downloaded the supervision identity. This password is hidden until you click it.

Once you have entered your password, you will be able to make the following changes to a device enrolled with Automated Device Enrollment in Apple Configurator 2:

  • Clear passcode on the device

  • Clear restrictions passcode on the device

  • Start single app mode on the device

  • Restart and shut down the device

  • Set a wallpaper

  • Apply a Home screen layout

For more information about how to send quick action commands, see Quick Action Commands for Device Management.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2019 Jamf. All rights reserved.