Alternatively, devices that meet the requirements can be supervised and enrolled over the air using Apple's Device Enrollment Program, or devices can be enrolled using Configurator v1.5 or later by providing the enrollment URL during device preparation.
Apple Configurator provides for three workflow panes: Prepare, Supervise, and Assign. From the Prepare pane, connected devices can either be put into Supervised mode or remain un-supervised (supervision OFF). Supervision mode performs a factory reset of all connected devices, installs the selected version of iOS, and installs a Supervision profile on the device along with any other selected profiles or apps. With 'Supervision OFF,' selected configuration profiles and iOS apps can be installed on connected devices without first wiping the device.
Benefits to Supervising devices
A decision to Supervise devices should be made early, as supervising requires a complete wipe of each device (erases all content and settings).
Supervision allows for the following iOS supervised restrictions listed on the MDM > Settings page toward the bottom of the Restrictions tab:
Mass enrollment steps for Systems Manager can be followed from either the Prepare or Supervise tabs in Apple Configurator. In order for the Meraki SM management profile to successfully install, both the Mac computer running Apple Configurator AND the connected iOS device(s) need to have an unblocked connection to the internet. This is required, because the iOS devices need to contact Systems Manager and Apple's MDM servers immediately upon enrollment. The most common reason for a failed Meraki SM management profile installation is because the iOS device does not have an active internet connection at the time the Meraki SM management profile is installed (often times the result of putting a device into Supervision mode - thus wiping the device and removing its WiFi connection).
Instead of manually connecting to a WiFi network from each device, a configuration profile with WiFi settings can be applied via Apple Configurator prior to installing the Meraki SM Management Profile.
Physically sync iOS device(s) connected to a Mac computer running Apple Configurator
Import the Meraki Management profile to Apple Configurator
Push a profile with a wireless payload to devices synced to a Mac computer (optional)
This step can be skipped by manually selecting a SSID from every synced device. However, it can save time if a large number of devices are being configured at once.
Push the Meraki Management profile to devices synced to a Mac computer
To verify that the Meraki SM management profile successfully installed, please navigate to Settings > General > Device Management from a single synced device, and check whether the Meraki profile is installed.In this example, the following profiles should be listed:
If everything has installed correctly and the devices have checked-in with Systems Manager Dashboard, they will show up under Monitor > Clients.
In some cases, the Systems Manager profile fails to install on an iOS device with an error "Can't install profile."
This happens when the iPad does not have network access, and cannot verify the profile that you're trying to push with Apple Configurator.
To remedy this error, ensure that:
For the necessary IPs/ports that need to be opened for iOS devices to communicate with Systems Manager, please consult the Firewall Information page.
Using Apple Configurator, users can mass enroll devices to a Systems Manager network. This saves administrators or end users from having to manually enroll each iPad to Systems Manager. This is a great option for schools and institutions with a large number of devices to enroll.
For more information on using Systems Manager in conjunction with Apple Configurator to manage iOS devices, please read our Best Practices Whitepaper on the topic.