Enroll iOS Device in Lightspeed Systems MDM with Configurator

Since we manage nearly 2000 iOS devices, I prefer to have my deployment as streamlined as possible.  I prefer to touch the devices as little as possible.  Nothing bothers me more than having to manually input settings on each device.  To ease management of our iOS devices we purchased an MDM solution that Lightspeed Systems offers.

We are currently using Configurator to supervise the iOS devices and enroll them in the MDM.  Lightspeed also allows devices to be enrolled in the MDM via a web link if you are using a BYOD model.  Again, since we are going for the least number of steps it works best to have Configurator perform the enrollment.

Download Enrollment Profile

Before we can perform the enrollment we need to download the enrollment profile from the Lightspeed Mobile Manger.

1.  Login to the Lightspeed Mobile Manager.

2.  Click on the chain icon to the right of your organizations name.

Mobile Manager should now display two enrollment options as pictured below.  Bulk Enrollment is for use with Apple Configurator and Individual Enrollment is for enrollment via Safari.  For this scenario we want to use the Bulk Enrollment option.

3.  Click on Download Profile to download the enrollment profile..  The filename will include your organization name with the extension .mobileconfig.

Install Enrollment Profile

4.  Open Apple Configurator.

5.  Click the + under the profile section and select Import Profile...  Browse to the enrollment profile that was downloaded previously and select open.

6.  Check the box next to the imported profile.

Now you can hook up your iOS devices, set your desired options and click Prepare.  The device should then be enrolled in Lightspeed Mobile Manager.  This does require some patience and is by no means an exact science.  You must also have a wireless profile set to install on your iOS device while being prepared.  If you do not the enrollment will fail.

I have found that it works best to apply the Enrollment Profile after preparing/supervising the devices.  After the device has successfully been prepared/supervised it is easy to apply the enrollment profile.  This method ensures that the wireless profile has a chance to be applied and gives the device time to connect to the wireless network.

The following steps outline how to apply the Enrollment Profile after supervising the devices.

Apply Enrollment Profile

1.  Click on the Supervise tab.

2.  Select the device(s) that you want to apply the Enrollment Profile to.

3.  Check the box next to the Enrollment Profile and click Apply.

Configurator should now enroll the device in the Lightspeed MDM.

Export Trust and Enrollment Profiles - Part 3

Part 3:  Export Trust and Enrollment Profiles

Now that Profile Manger has been setup we need to prepare for device enrollment.  I prefer to use Apple Configurator to prepare and enroll the iOS devices, then manage them with Profile Manager 2.  Before we prepare and enroll the devices we need to save the trust profile and enrollment profile from Profile Manager.

Setup

This setup assumes that you have Profile Manger 2 configured and have installed Apple Configurator.  If you have not setup Configurator, it can be downloaded for free from the Mac App Store.

I would perform the following steps from the computer that Configurator is installed on.

Download Trust and Enrollment Profiles

1.  Log into Profile Manager 2 with an account authorized for Profile Manger.

2.  Click on your username in the upper right corner of the Profile Manger page.

3.  Click Download Trust Profile.  The trust profile will now be saved to your Downloads folder.  We will use this shortly.

4.  Click on the + in the lower left corner of Profile Manger 2 and click Enrollment Profile.  A new enrollment profile will now be created.

5.  Click on the title New Enrollment Profile and type the name of the enrollment profile.  I usually use the name of my organization.  i.e. MySchool Enrollment Profile

6.  There is a checkbox to Restrict use to devices with placeholders.  If you leave this checked you will need to use the Devices library to prestage your devices.  If it is unchecked any device can use this profile to join your PM2 server.

7.  Click Save, and confirm by clicking Save.

8.  Next click the Download button to download your enrollment profile to the Downloads folder.

NOTE:  10.7 and 10.8 may ask you if you want to enroll your Mac after the download is complete.  Since we are using this for our iOS devices, click Cancel.

We now have the profiles we need to enroll iOS devices in Profile Manger.