Posted on 10-09-2013 02:29 AM
Hi All,
I was hoping that v9.x and ios7 would allow me to enrol an iPad manually via configurator. I have downloaded the trust profile and enrolment profile but when I push them to the iPad it fails with a "no wifi" warning.
I understand that the system can't push other profiles to the iPad without WiFi, but I don't understand why the CA certificate and the MDM profile certificate can't be installed via the USB cable?
It would make my life so much easier if I could get profiles pushed to an iPad via the USB cable.
Cheers,
Chris.
Posted on 10-09-2013 05:07 AM
The device itself needs to be connected to WiFi so that it can enroll itself in the JSS during the enrollment profile installation. The way to do it is to install the WiFi profile first, then the enrollment profile.
Posted on 10-09-2013 05:48 AM
@dgreening Can you share any insight into installing the profiles in that specific order? I'm getting consistent failures because the devices are not online when the enrollment is attempted.
Do they just get installed in alphabetical order?
Posted on 10-09-2013 06:11 AM
I feel you on this, but I also caved and decided to make it a two-step process - 1) prep/supervise the devices with the wifi config profile, then 2) immediately refresh all connected devices with the enrollment profile. I've never had luck with consistency when trying to do wifi+enrollment profiles in one go because lots of times, the enrollment profile tries to install/run before wifi has finished initializing. i.e. - The iPad may not even have a valid IP address by the time the enrollment profile installation begins, as Configurator blows right through the whole list of config profiles to install. Separating the profile installs gives all connected iPads time to grab an IP and otherwise get "settled" into our wireless network before attempting to contact the JSS for enrollment. I hope that helps a bit!
Posted on 10-09-2013 06:15 AM
Yup, I install them separately, as the WiFi can take a minute or two to obtain a connection/IP.
Posted on 10-09-2013 06:17 AM
@gokoudes So you're pushing ONLY the WiFi profile during the one-time "Prepare" and then subsequent refreshes on the Supervise pane push the enrollment profile and any additional profiles?
I have a problematic checkout cart where the iPads get refreshed every 4 hours.
Posted on 10-09-2013 06:31 AM
@bmwarren yessir, that sounds like what I do. In the case of a cart whose iPads are refreshed multiple times a day, I would make sure to set "Update iOS: Never Update Device" and "Restore: Don't restore backup" --
Configurator doesn't appear to re-install profiles or make any changes to profiles unless one is added/removed/edited, so a cart refreshing iPads every 4 hours won't actually do anything to those iPads as long as your per-device profile/restore/iOS options aren't changing in Configurator.
We're fortunate in that we don't touch Configurator until it's time to restore/enroll, but I'm thinking your cart scenario would be okay. Re: the "problematic" cart -- Is the issue that all iPads on the cart are forced to refresh every 4 hours, or is there another issue I may have missed?
I'm not sure my wording is good in this reply - does it make sense?
Posted on 10-09-2013 06:35 AM
@gokoudes Unfortunately it's a student checkout cart and all data needs to be wiped from the iPads when they're checked back in. The next student is supposed to get a "clean" iPad.
It worked fine with iOS 6 and Configurator 1.3 by simply restoring a backup of the clean "image" during the refresh. Configurator 1.4 doesn't seem to consistently restore the backup and/or drops the iPad off at the initial setup assistant walkthrough which is not ideal.
Posted on 10-09-2013 06:51 AM
@bmwarren Yikes, I hear ya, it seems to be a common gripe - and a very valid one. I miss having the functionality you're talking about when restoring. I wish I had a magic work-around for this, but I've accepted relegation to handling each iPad at imaging until iOS changes or someone has a way to restore iOS without user input on every device. I've tried setting the Configuration option "Update iOS: Never Update Device" as some have discussed here, but I've had mixed results, at best. Maybe give that a shot if you haven't tried it already?
Posted on 10-10-2013 08:43 AM
I also Prepare with the WiFi profile and the Enroll right after on the Supervise pane. I am also successfully installing the trust profile when I Prepare.
I don't know if this is a Configurator 1.4 bug or not since I did not have any devices before last week.. but when I refresh a supervised iOS 7.0.2 device it removes the profiles and reinstalls them - even if there has not been a change. You can see the device history reflect this in Casper. So this is different than what gokoudes reported above.
I have my settings at "Update iOS: Never Update Device" and "Restore: Don't restore backup".
Configurator preference for 'Remove apps and profiles Configurator did not install' is NOT set.
Posted on 10-10-2013 01:27 PM
With Configurator 1.4 I have been able to install WiFi and enroll from the prepare tab. It looks like it installs the WiFi profile then waits with "Waiting for device to be ready" then once WiFi kicks on and authenticates it moves on and installs the MDM profile. This is the first time since configurator came out that it has worked as expected for me. It does remove and re-add the MDM profiles when refreshing after supervised though...
Posted on 10-10-2013 02:03 PM
Hi All,
my understanding is that preparing the device erases it. Is that correct?
Cheers,
Chris.
Posted on 10-10-2013 02:40 PM
Yes
Posted on 10-10-2013 02:44 PM
Well that's the end of that idea. These devices are BYOD and my users aren't going to be very happy to have their devices wiped.
Back to the drawing board.
Posted on 10-10-2013 04:07 PM
No, probably not!
You can still enroll them into an MDM for basic management like WiFi. But you wouldn't use Configurator.
chris
Posted on 10-11-2013 05:11 AM
Has anyone figured out how to reliably bypass Setup Assistant after refreshing a supervised device? Even with a Wi-Fi profile I'm seeing I still must manually tap the SSID to connect. I'm not prompted for credentials since those are in the config payload. Surely I'm missing something? I'd like to just have the device refreshed and handed back to the next check-out customer already on the springboard.
Posted on 10-11-2013 09:55 AM
yes, restart the iPad.
I've logged it with AppleCare Enterprise.