Enrolling iPads with Apple Configurator

[fbaker]

So I'm going to have quite a few iPads in a shared deployment, and I'll need to enroll them with Apple Configurator. I did some searching, but it appears the old discussion found here is outdated. I'm not quite sure where I need to go in the JSS to download any of the trust profiles since most of the things I've done so far have been with DEP.

Any threads or pointing me in the correct direction would be greatly appreciated. Thanks!

[cbrewer]

If you have an Apple developer account you might look at Apple Configurator 2. This version is supposed to worth with DEP.

[fbaker]

@cbrewer I do have developer account, but I don't need to enroll them with DEP. My 1-1 iPads are all done with DEP, but not in our shared deployment.

[cbrewer]

I think it's in the Admin guide, but you go to Mobile Devices -> Enrollment Profiles to create an Enrollment Profile. After creating the profile, you can download it as well as the Trust Profile.

[jchurch]

this might be worth a look see, https://developer.apple.com/videos/wwdc/2015/?id=301
if you can wait for iOS 9.

[RWitt]

The video was definitely worth a look good things coming our way. The issue is like most of Apples recent releases are geared for a Sept/October launch which does absolutely no good for schools. I keep hoping one year that will change.

We are moving our cart based ipads to DEP because of the features available and just setting up general ID's using App ID's for students.

[CasperSally]

I hear you about timing for schools @Witt but this kind of change I think it's good to flush out for almost a whole year before we adopt. I still need to watch the video but apple reps have promised it's close to what I've been complaining to them for now for years.

[qhle373]

You can enroll your iPad with Configurator one of 2 ways.

1) Downloading the MDM profile from JSS (Mobile Devices > Enrollment Profiles) Click Download and also Trust Profile.
- Make sure you install your Wireless and CA profiles first, and then get the MDM profile on there

2) Enrolling via your URL. (In JSS)
- Mobile Device Management > Apple Configurator Enrollment > Allow Apple Configurator enrollment
- example URL (https://jss.mycompany.com:8443/configuratorenroll) our URL has jamf in it so just use whatever one you have, and add /configuratorenroll to the end of it.
(In Configurator)
- Upload the Trust Profile (CA Certificate that you downloaded from JSS)
- In Setup Tab > Configure Settings > add your URL with /configuratorenroll at the end
- Add the Anchor Certificate (this will open your keychain and its just the JSS Built-In Certificate Authority
- During the setup screens, you will be prompted whether or not to enroll the iPad or skip enrollment

Why 2 ways? Using the MDM Enrollment profile can assign a username and other info to that iPad. In our case we have multiple sites and scope things to the username of the shared iPads.

Once Configurator 2 comes out we will re-do the approach of course, but for now that's what is available