Trying to enrol device via configurator. ios7.02 and configuration 1.4

lhscasper
Contributor

Hi All,

I was hoping that v9.x and ios7 would allow me to enrol an iPad manually via configurator. I have downloaded the trust profile and enrolment profile but when I push them to the iPad it fails with a "no wifi" warning.

I understand that the system can't push other profiles to the iPad without WiFi, but I don't understand why the CA certificate and the MDM profile certificate can't be installed via the USB cable?

It would make my life so much easier if I could get profiles pushed to an iPad via the USB cable.

Cheers,
Chris.

16 REPLIES 16

dgreening
Valued Contributor II

The device itself needs to be connected to WiFi so that it can enroll itself in the JSS during the enrollment profile installation. The way to do it is to install the WiFi profile first, then the enrollment profile.

haircut
Contributor

@dgreening Can you share any insight into installing the profiles in that specific order? I'm getting consistent failures because the devices are not online when the enrollment is attempted.

Do they just get installed in alphabetical order?

gokoudes
New Contributor III

I feel you on this, but I also caved and decided to make it a two-step process - 1) prep/supervise the devices with the wifi config profile, then 2) immediately refresh all connected devices with the enrollment profile. I've never had luck with consistency when trying to do wifi+enrollment profiles in one go because lots of times, the enrollment profile tries to install/run before wifi has finished initializing. i.e. - The iPad may not even have a valid IP address by the time the enrollment profile installation begins, as Configurator blows right through the whole list of config profiles to install. Separating the profile installs gives all connected iPads time to grab an IP and otherwise get "settled" into our wireless network before attempting to contact the JSS for enrollment. I hope that helps a bit!

dgreening
Valued Contributor II

Yup, I install them separately, as the WiFi can take a minute or two to obtain a connection/IP.

haircut
Contributor

@gokoudes So you're pushing ONLY the WiFi profile during the one-time "Prepare" and then subsequent refreshes on the Supervise pane push the enrollment profile and any additional profiles?

I have a problematic checkout cart where the iPads get refreshed every 4 hours.

gokoudes
New Contributor III

@bmwarren yessir, that sounds like what I do. In the case of a cart whose iPads are refreshed multiple times a day, I would make sure to set "Update iOS: Never Update Device" and "Restore: Don't restore backup" --

Configurator doesn't appear to re-install profiles or make any changes to profiles unless one is added/removed/edited, so a cart refreshing iPads every 4 hours won't actually do anything to those iPads as long as your per-device profile/restore/iOS options aren't changing in Configurator.

We're fortunate in that we don't touch Configurator until it's time to restore/enroll, but I'm thinking your cart scenario would be okay. Re: the "problematic" cart -- Is the issue that all iPads on the cart are forced to refresh every 4 hours, or is there another issue I may have missed?

I'm not sure my wording is good in this reply - does it make sense?

haircut
Contributor

@gokoudes Unfortunately it's a student checkout cart and all data needs to be wiped from the iPads when they're checked back in. The next student is supposed to get a "clean" iPad.

It worked fine with iOS 6 and Configurator 1.3 by simply restoring a backup of the clean "image" during the refresh. Configurator 1.4 doesn't seem to consistently restore the backup and/or drops the iPad off at the initial setup assistant walkthrough which is not ideal.

gokoudes
New Contributor III

@bmwarren Yikes, I hear ya, it seems to be a common gripe - and a very valid one. I miss having the functionality you're talking about when restoring. I wish I had a magic work-around for this, but I've accepted relegation to handling each iPad at imaging until iOS changes or someone has a way to restore iOS without user input on every device. I've tried setting the Configuration option "Update iOS: Never Update Device" as some have discussed here, but I've had mixed results, at best. Maybe give that a shot if you haven't tried it already?

cdenesha
Valued Contributor III

I also Prepare with the WiFi profile and the Enroll right after on the Supervise pane. I am also successfully installing the trust profile when I Prepare.

I don't know if this is a Configurator 1.4 bug or not since I did not have any devices before last week.. but when I refresh a supervised iOS 7.0.2 device it removes the profiles and reinstalls them - even if there has not been a change. You can see the device history reflect this in Casper. So this is different than what gokoudes reported above.

I have my settings at "Update iOS: Never Update Device" and "Restore: Don't restore backup".

Configurator preference for 'Remove apps and profiles Configurator did not install' is NOT set.

Nick_Gooch
Contributor III

With Configurator 1.4 I have been able to install WiFi and enroll from the prepare tab. It looks like it installs the WiFi profile then waits with "Waiting for device to be ready" then once WiFi kicks on and authenticates it moves on and installs the MDM profile. This is the first time since configurator came out that it has worked as expected for me. It does remove and re-add the MDM profiles when refreshing after supervised though...

lhscasper
Contributor

Hi All,

my understanding is that preparing the device erases it. Is that correct?

Cheers,
Chris.

cdenesha
Valued Contributor III

Yes

lhscasper
Contributor

Well that's the end of that idea. These devices are BYOD and my users aren't going to be very happy to have their devices wiped.

Back to the drawing board.

cdenesha
Valued Contributor III

No, probably not!

You can still enroll them into an MDM for basic management like WiFi. But you wouldn't use Configurator.

chris

haircut
Contributor

Has anyone figured out how to reliably bypass Setup Assistant after refreshing a supervised device? Even with a Wi-Fi profile I'm seeing I still must manually tap the SSID to connect. I'm not prompted for credentials since those are in the config payload. Surely I'm missing something? I'd like to just have the device refreshed and handed back to the next check-out customer already on the springboard.

cdenesha
Valued Contributor III

yes, restart the iPad.

I've logged it with AppleCare Enterprise.