Starting with Apple Configurator 2, supervised devices can be paired with multiple Apple Configurator 2 workstations. To ensure that devices are paired securely, each workstation must have a matching supervision identity and an identity certificate (.p12 file) with a private key. The identity is applied to devices when enrolled using a PreStage enrollment or paired with an Apple Configurator 2 workstation. If the wrong identity is applied to a device, the device must be wiped, re-supervised, and re-enrolled to change the identity.

Supervision identities can be created in Apple Configurator 2 or the JSS. If the identity you want to use is already in Apple Configurator 2, you can use it with any of the workflows explained in this paper. Otherwise, you can use the JSS to create a new supervision identity that can be downloaded as an identity certificate and private key.

For more information about supervision identities, see "About Identities" in Apple's Help documentation.

Use a Supervision Identity from Apple Configurator 2

Download the identity from Apple Configurator 2:
1. Navigate to Preferences > Organizations and select the identity.
2. Click the Action pop-up menu (gear icon) and then choose Export Supervision Identity.
3. Enter a password for the identity.
  You will need to enter the password when uploading the identity to the JSS.
4. Save the identity.
  The identity is saved to the workstation as a .p12 file.
Upload the identity to the JSS so it can be accessed from other Apple Configurator 2 workstations.
See "Uploading a Supervision Identity" on the Supervision Identities page in the Casper Suite Administrator's Guide.
From an Apple Configurator 2 workstation, log in to the JSS.
Download the supervision identity (.p12).
See "Downloading a Supervision Identity" on the Supervision Identities page in the Casper Suite Administrator's Guide.
Double-click the .p12 file and add it to Keychain Access.
Import the identity to Apple Configurator 2 by choosing the identity.
See "Generate or Choose a Supervision Identity" in Apple's Help documentation.

Repeat steps 3–6 on other Apple Configurator 2 workstations.

Create and Use a Supervision Identity from the JSS

Create a supervision identity using the JSS.
See Supervision Identities in the Casper Suite Administrator's Guide.
From an Apple Configurator 2 workstation, log in to the JSS.
Download the supervision identity (.p12).
See "Downloading a Supervision Identity" on the Supervision Identities page in the Casper Suite Administrator's Guide.
Double-click the .p12 file and add it to Keychain Access.
Import the identity to Apple Configurator 2 by choosing the identity.
See "Generate or Choose a Supervision Identity" in Apple's Help documentation.

Repeat steps 2–5 on other Apple Configurator 2 workstations.