
Check the box for the newly added profile (MDM-iOS5 in this example).
Set the name to be blank, numbering should be disabled, Supervision should be off, iOS should be set to No Change, “Erase before installing” should be unchecked, Don’t Restore Backup should be set in the Restore field. In this example, don’t configure any other options. Once the profile is installed in Apple Configurator, let’s deploy it. The profile then appears in Apple Configurator (in this example, called MDM-iOS5).ĭeploy The Casper MDM Enrollment Profile Through Apple Configurator. Drag the profile (by default currently called MDM-iOS5.mobileconfig) from the Finder into the list of Profiles. Click on Prepare in the row of icons along the top of the screen. Open Apple Configurator on the client computer. To deploy the profile through Apple Configurator: mobileconfig file that will enroll devices into Casper MDM. Click on the magnifying glass icon to see the. Once the profile is downloaded, it will automatically attempt to enroll the computer you are downloading it from in the Profiles System Preferences pane. #Jamf apple configurator enrollment download
At the Enrollment Profiles screen, click on Download for the appropriate profile (for most environments there should only be one). At the Mobile Device Enrollment Invitations screen, click on the Enrollment Profiles tab. Click on the link for Mobile Device Enrollment. To download an enrollment profile from Casper MDM: cer format is sufficient for our purposes. Choose a location to save the certificate to using the Where field.
When prompted, provide a name for the certificate in the Save As fiel.Control-click on the name of your server’s “Built-in Certificate Authority” entry.When prompted to trust the certificate, click on the disclosure triangle and then the checkbox to trust the cert, providing the administrative credentials when prompted.
To obtain the trust certificate from the JSS Server: Obtain the Certificate for the JSS Server While you hopefully won’t need to download the certificate, we’ll start there: Additionally, a certificate can be needed if the certificate is not included in the profile, an option available as a checkbox in the setup. When doing larger deployments the enrollment process can be automated so that devices are automatically enrolled into Casper MDM when they are set up using an Enrollment Profile that is manually downloaded from Casper and deployed to device.
authorizationdb Defaults in macOS 10.14Įnrolling iPads into the JAMF Casper MDM solution is done through Apple Configurator, messages or using links deployed to iOS devices as web clips. Crosh Commands (ChromeOS Shell Commands). OS X Server 5 Guide (El Capitan and Yosemite). So I assume this untrusted cert is the root of the error, have now removed accordingly. Date ranges are valid on both, as to why the older org profile is untrusted, I can only guess. So I head on over to Configurator 2 Preferences, Orgs, and then look for the one that has the older certificate date when you click on 'Show Supervision Identity.' - this is where I find that the older idendity appears to have an untrusted cert, and the newer one is trusted. However, I now have two items in my Org list have exactly the same string, which isn't brilliant. It revalidated with the ABM apple ID and then the prepare went through on the iPad without error. So last thing to try was to choose the 'New Organization' option on the 'Assign to Organisation' option. I'm testing MDM differences, so have two MDMs setup (Jamf and the other both had this same error). The fix (for me) was to re-create the Organization profile as part of the Prepare steps.
I just had this exact error in my new development environment.