This documentation provides steps on manually enrolling iPads & iPhones in Jamf. This is setup using Apple Configurator 2.
Creating Packages
Log in to Jamf Pro and go to Mobile Device – Enrollment Profile
- Select New
- Fill in Display Name – MDM Profile
- Click Save
- Select Trust (This is the Trust Profile)
- Select Download
Note: You will have two downloads will start. Cancel both of them when they try to install onto your Mac. You just need to download them. Copy both files to the Desktop.
Open Apple Configurator
- Select File – New Profile (This is to create a new Wi-Fi Profile)
- Give the Profile a name – Wi-Fi Network
- Go to the Wi-Fi Section – Select Configure
- Fill in the credentials of your designated Wi-Fi
When finished, save the profile by clicking the red button in the top left corner. It will prompt you to save.
Save it to your Desktop.
- Select File – New Blueprint
- Name it – Network & Trust Profiles
- Open the Blueprint and go to the Profiles section (Tab on left hand side)
- Add Profiles
- Add the Network Profile that was just created and the Trust Profile that was created in Jamf Pro
- Select Done
In the menu bar click view, select the Edit Blueprints
- Highlight Network and Trust and click Prepare
- Select: Manual
- Server: Do not enroll in MDM
- Select: Supervise devices and allow pairing
- Fill in organisation details: %Organisation_Name%
- Configure the iOS Setup Assistant
- Then click Prepare
Using the same process create a new Blueprint for the MDM Profile
- Open the Blueprint and go to the Profiles section (Tab on left hand side)
- Add Profiles
- Select Done (Do Not Prepare like the Network blueprint)
- Finally, add the MDM Profile that was created in Jamf Pro
See the next steps on applying these Profiles to an iPad or iPhone
Manual Deployment of Devices
Note: These steps should be followed if the device has no remote enrolment assigned in an MDM. I generally use this for legacy devices or devices that have no come pre-enrolled.
Follow the instructions below to enrol a device:
- Connect the device to your Mac
- Open Apple Configurator and highlight the device you want to enroll
- Apply the Network and Trust Blueprint first – This process will prompt you to input the administrators password of the mac you are using.
Note: Do this first as devices require an internet connection to allow a wireless connection to Jamf Pro during the deployment process, enrolling the device. Without an internet connection the device cannot be seen by Jamf.
- Select Erase when (if) prompted. This will factory reset the device and install iOS.
- Finally Apply the MDM Profile
You can the disconnect the device and begin the deployment process. When you start the up device follow the standard procedure to setup a device. Ensure that when the device starts it connects to the Wi-Fi you setup initially.
Once the setup procedure is completed the device should now be seen in the MDM. You can then make any adjustments and configure the device accordingly.
- To change the name of the iPad go to Jamf and find the device then on the iPad go to Settings > About then change the name there. This can take a few minutes to update. To speed up the process go to the Management tab on Jamf and Update Inventory. You can make this name permanent by selecting Enforce Mobile Device Name in Jamf.
- Once the name is changed, assigned apps show up in Self Service, assigned to a static group (if one exists) and a user has been assigned to it, it is now ready to be sent to the user.
- To assign apps to a device you need to add the user to a department and building. If the apps do not show up in self service ensure the app is assigned to the department in Mobile Device Apps.
David Williams Technical 