Starting with Apple Configurator 2, supervised devices can be paired with multiple Apple Configurator 2 workstations. To ensure that devices are paired securely, each workstation must have a matching supervision identity and an identity certificate (.p12 file) with a private key. The identity is applied to devices when enrolled using a PreStage enrollment or paired with an Apple Configurator 2 workstation. If the wrong identity is applied to a device, the device must be wiped, re-supervised, and re-enrolled to change the identity.

Supervision identities can be created in Apple Configurator 2 or Jamf Pro. If the identity you want to use is already in Apple Configurator 2, you can use it with any of the workflows explained in this paper. Otherwise, you can use Jamf Pro to create a new supervision identity that can be downloaded as an identity certificate and private key.

For more information about supervision identities, see About identities in Apple's Help documentation.

Use a Supervision Identity from Apple Configurator 2

Download the identity from Apple Configurator 2:
1. Navigate to Preferences > Organizations and select the identity.
2. Click the Action pop-up menu (gear icon) and then choose Export Supervision Identity.
3. Enter a password for the identity.
  You will need to enter the password when uploading the identity to Jamf Pro.
4. Save the identity.
  The identity is saved to the workstation as a .p12 file.
Upload the identity to Jamf Pro so it can be accessed from other Apple Configurator 2 workstations.
See "Uploading a Supervision Identity" on the Supervision Identities page in the Jamf Pro Administrator's Guide.
From an Apple Configurator 2 workstation, log in to Jamf Pro.
Download the supervision identity (.p12).
See "Downloading a Supervision Identity" on the Supervision Identities page in the Jamf Pro Administrator's Guide.
Double-click the .p12 file and add it to Keychain Access.
Import the identity to Apple Configurator 2 by choosing the identity.
See Generate or choose a supervision identity in Apple's Help documentation.

Repeat steps 3–6 on other Apple Configurator 2 workstations.

Create and Use a Supervision Identity from Jamf Pro

Create a supervision identity using Jamf Pro.
See Supervision Identities in the Jamf Pro Administrator's Guide.
From an Apple Configurator 2 workstation, log in to Jamf Pro.
Download the supervision identity (.p12).
See "Downloading a Supervision Identity" on the Supervision Identities page in the Jamf Pro Administrator's Guide.
Double-click the .p12 file and add it to Keychain Access.
Import the identity to Apple Configurator 2 by choosing the identity.
See Generate or choose a supervision identity in Apple's Help documentation.

Repeat steps 2–5 on other Apple Configurator 2 workstations.