tvOS PreStage Enrollments

Beginning with tvOS 10.2, Apple TV devices can be enrolled via Apple's Device Enrollment Program (DEP) using a PreStage enrollment. As with computers and iOS devices, a PreStage enrollment allows you to store enrollment and mobile device setup settings in the Jamf Software Server (JSS) and use them to enroll new Apple TV devices with the JSS. This reduces the amount of time and interaction it takes to prepare mobile devices for use. For Apple TV, this includes supervising devices, requiring users to apply the MDM profile for enrollment, and auto advancing through the Setup Assistant with optional settings to skip selected items during enrollment.

Before you can use a PreStage enrollment, you need to integrate the JSS with DEP. This creates an instance of DEP in the JSS. (For more information, see Integrating with the Device Enrollment Program in the Casper Suite Administrator's Guide.) Only devices associated with a DEP instance can be enrolled with the JSS using a PreStage enrollment.

After creating a DEP instance, you need to create a PreStage enrollment in the JSS for the Apple TV devices you want to enroll. Creating a PreStage enrollment allows you to configure the enrollment settings and customize the user experience of the Setup Assistant. You can also specify the devices that should be enrolled using the PreStage enrollment. In addition, you can specify that devices newly associated with the DEP instance be automatically added to the PreStage enrollment.

You can require users to authenticate during mobile device setup using an LDAP directory account or a JSS user account. If users authenticate with an LDAP directory account, user and location information is submitted during enrollment.

Requirements

To require LDAP users or JSS users to authenticate during mobile device setup, you need an LDAP server set up in the JSS. (For more information, see Integrating with LDAP Directory Services in the Casper Suite Administrator's Guide.) In addition, authentication requires Apple TV devices with tvOS 10.2 or later.

Configuring a tvOS PreStage Enrollment

  1. Log in to the JSS with a web browser.

  2. Click Mobile Devices at the top of the page.

  3. Click PreStage Enrollments.

  4. Click New images/download/thumbnails/15182482/New_icon.png .

  5. Use the General payload to configure basic settings for the PreStage enrollment.

    • To automatically skip all available steps in the Setup Assistant for a zero-touch deployment experience, select the Auto Advance through Setup Assistant (tvOS only) checkbox. Ethernet, power, and HDMI connections are required.
      Note: When using automatic setup, do not use the Siri Remote, as it will disrupt enrollment. Your Siri Remote is not automatically paired with your Apple TV when using Auto Advance.

    • To customize the user experience of the Setup Assistant, select which steps you want to skip in the Setup Assistant. If you choose to skip steps, the user can enable these settings after the device is configured unless otherwise restricted.

  6. (Optional) Use the Mobile Device Names payload to specify the naming method for Apple TV devices. If desired, select the Enforce Mobile Device Names checkbox to reset device names to the selected naming method if modified by an end user.

  7. (Optional) Use the User and Location payload to specify user and location information for the Apple TV devices.
    This information is stored in the JSS for each device enrolled using a PreStage enrollment.
    The User and Location payload is only displayed if the Require Authentication checkbox is not selected.

  8. (Optional) Use the Purchasing payload to specify purchasing information for the Apple TV devices.
    This information is stored in the JSS for each device enrolled using a PreStage enrollment.

  9. (Optional) Use the Attachments payload to upload attachments to store for Apple TV devices.
    This information is stored in the JSS for each device enrolled using a PreStage enrollment.

  10. If the SSL certificate you are using is signed by an external CA (your organization's CA or a trusted third-party CA), use the Certificates payload to upload a certificate for the CA that you want mobile devices to trust at enrollment.
    The anchor certificate is only displayed if the SSL certificate you are using is signed by the JSS’s built-in CA.

  11. Click the Scope tab and configure the scope of the PreStage enrollment by selecting the checkbox next to each Apple TV you want to add to the scope.
    The Apple TV devices listed on the Scope tab are the devices that are associated with the Device Enrollment Program (DEP) via the server token file (.p7m) you downloaded from the Apple Deployment Programs website.
    Note: If you want to add Apple TV devices to the scope automatically as the devices become associated with the DEP instance, select the Automatically assign new devices checkbox in the General payload.

  12. Click Save.

Related Information

For related information, see the following sections of the Casper Suite Administrator's Guide:

Copyright | Privacy | Terms of Use | Security
© copyright 2002-2017 Jamf. All rights reserved.