Requirements

To deploy devices using manual enrollment and an enrollment profile, you need:

• The JSS v9.82 or later

• iOS devices supported by Apple Configurator 2

• A Mac with Apple Configurator 2 installed

For detailed Apple Configurator 2 requirements, see "Requirements" in Apple's Help documentation.

Create an Enrollment Profile

1. In the JSS, create an enrollment profile.
   See "Creating an Enrollment Profile for Use with Apple Configurator" on the Enrollment Profiles page in the Casper Suite Administrator's Guide.

2. Download the trust profile (Trust Profile.mobileconfig) from the JSS.
   See "Downloading the Trust Profile" on the Enrollment Profiles page in the Casper Suite Administrator's Guide.

3. Download the enrollment profile (<Nameofprofile>.mobileconfig) from the JSS.
   See "Downloading an Enrollment Profile" on the Enrollment Profiles page in the Casper Suite Administrator's Guide.

Create and Upload the Supervision Identity

Make sure a supervision identity is in the JSS and on Apple Configurator 2 workstations.

Create the "Prepare" Blueprint

The "Prepare" blueprint will be used to apply a Wi-Fi configuration profile and the supervision identity.

1. In Apple Configurator 2, create a Wi-Fi configuration profile.
   See "Create and Customize a Configuration Profile" in Apple's Help documentation.

2. Create a blueprint and name it "Prepare".
   See "About Blueprints" in Apple's Help documentation.

3. Modify the device information for the blueprint if desired.
   See "Modify Device Information" in Apple's Help documentation.

4. Prepare the blueprint:
   See "Prepare Devices Manually" in Apple's Help documentation.

   1. Select "Manual Enrollment".

   2. Select "Don't Enroll in MDM".
      Devices will be enrolled with the JSS through the enrollment profile, not the blueprint.

   3. Select your supervision options and choose a supervision identity.

   4. Select which steps in the iOS Setup Assistant to skip.

5. Add the Wi-Fi profile to the blueprint.
   See "Add Configuration Profiles" in Apple's Help documentation.

6. Add the trust profile (Trust Profile.mobileconfig) to the blueprint.

Create the "Enroll" Blueprint

The "Enroll" blueprint will be used to enroll devices with the JSS by installing the trust profile and the enrollment profile.

1. Create a blueprint and name it "Enroll".
   See "About Blueprints" in Apple's Help documentation.

2. Add the enrollment profile (<Nameofprofile>.mobileconfig) to the blueprint.
   See "Add Configuration Profiles" in Apple's Help documentation.

Note: Do not prepare this profile.

Deploy Devices Using Manual Enrollment with an Enrollment Profile

1. Connect devices to the Apple Configurator 2 workstation using a USB cable.

2. Apply the "Prepare" blueprint to the devices.
   See "About Blueprints" in Apple's Help documentation.

3. Apply the "Enroll" blueprint to the devices.

The devices are first configured with the settings in the "Prepare" blueprint. Then they are enrolled with the JSS using the "Enroll" blueprint.