4 Replies Latest reply on Mar 2, 2016 3:33 PM by jkellysps

    Download Enrollment Profile and Trust Profile for Apple Configurator

    jkellysps Rookie

      Can anyone tell me where to download the Enrollment Profile and Trust Profile for Apple Configurator?  We want to automatically enroll existing devices that are not part of the Apple DEP but it asks for both profiles.

       

      Help please as I am new to LanREV MDM.

       

      Regards

       

      Jason

        • 1. Re: Download Enrollment Profile and Trust Profile for Apple Configurator
          dherder Specialist

          Hi Jason,

          The MDM enrollment profile exists on your LANrev server in the %ProgramData%\Pole Position Software\LANrev Server directory and it is called "MDMEnrollmentBoostrap.mobileconfig". On a Mac server, it is in /Library/Application Support/LANrev Server/. The Trust Profile, as Configurator refers, is the root CA certificate for your signing certificate. If your signing certificate comes from a trusted CA provider that is in Apple's default trust chain, then I don't think you would need to load this. To check to see if your signing certificate originates from a CA within the default trust chain, look here.

           

          You can also take a look at this Apple KB for some background on this task.

           

          regards,

          dave

          1 of 1 people found this helpful
          • 2. Re: Download Enrollment Profile and Trust Profile for Apple Configurator
            jkellysps Rookie

            Thanks Dave.

            I have now added the enrollment profile however when I prepare the iPad it gets to the step to automatically configure then fails with "the configuration for your ipad could not be downloaded from "organization" invalid profile.

            I am not sure I have the correct enrollment url for the mdm server for this. I am using https://server fqdn/profile/enrollment.mdm

             

            Any help appreciated.

             

            Regards,

             

            Jason

            • 3. Re: Download Enrollment Profile and Trust Profile for Apple Configurator
              dherder Specialist

              Hi Jason,

              If the device is not DEP enabled, you will have to implement the KB 21276 : Enroll an iOS device without a DEP profile assigned using Configurator 2.

               

              Just to make it easier, I have cut and pasted the KB here for you and others:

              PROBLEM

              When preparing iOS devices via Configurator 2, devices may not have an ADEP profile assigned to them during initial preparation. Thus, in order to activate the device without ADEP involvement, a custom LANrev server modification needs to be implemented. In addition, you may have to define the server url as "https://<server.company.com>/MDMServiceConfig".

               

              ENVIRONMENT

              HEAT LANrev MDM

               

              RESOLUTION

              In order to allow automatic enrollment from Configurator 2 (because it will call the ADEP enrollment URL, but device most likely won't have a DEP enrollment profile assigned), the following server prefs value will have to be set on the LANrev Server:

               

              Value -> ADEPAllowEnrollmentWithoutAssignedProfile

              Type (Mac/Windows) -> Boolean/DWORD

              Default (Mac/Windows) -> false/0

              Description -> Set to true/1 (Mac/Windows) to allow DEP-style enrollment (e.g. when preparing with Configurator 2) even though device does not have DEP enrollment profile assigned or there aren't even DEP accounts configured

               

              ADDITIONAL INFORMATION

              KB 21108 : Add or edit prefs keys / registry values for LANrev

              1 of 1 people found this helpful
              • 4. Re: Download Enrollment Profile and Trust Profile for Apple Configurator
                jkellysps Rookie

                Thank you,

                All working now.

                Legend

                 

                Jason