MDM Profile Update

New Contributor


Trying to move my devices from iOS 4 to iOS 5 and it's not as painless as
I'd hoped.

I have a few hundred iPads on iOS 4 that were originally enrolled under an
iOS 4 profile. Because these devices are cart based, I created the profile
in the JSS and then downloaded it to a sync station. I then used iPhone
Configuration Utility to place the enrollment profile on the devices. That
part was great and worked as described.

We then recently moved to JSS 8.31 to take advantage of the iOS 5
improvements. Of course, an updated MDM profile was needed on the devices
that we upgrade from iOS 4 to iOS 5. We use Self Service, so I thought we
could just use the update feature there to move the MDM profile up. That
doesn't work as far as I can tell. As I read through the documentation for
8.31, it appears that the MDM profile will only update if the enrollment
was done OTA.

My question to the list is this then: Is that, in fact, true or is there a
way to get around this and allow for updating of a profile installed using



-- Drew Lane
Director of Technology
Derby Public Schools
iMessage and Facetime: dlane at
Office: 316.788.8591


Contributor II


Yes, as far as I can also tell Casper can only update a profile on a device if it was installed by Casper (e.g. OTA). We have a setup here where we install a basic profile with a Wireless and WebClip payload using IPCU when iPads are taken out of box. Then the students enrol OTA with Casper and they are given a second profile. The Casper logs on for the device show errors trying to remove the initial profile. I believe this is because the profiles installed by IPCU are not signed by the Casper server cert.

I'd would be interested to know if there is a way around this.