How to make a iOS Device Supervised

A Supervised iOS device allows you to enforce stricter policies and control more features on the device. For a corporate owned iOS device, it is quite helpful to make a device supervised so that you can get enhanced control on the device.

Apple has provided with a mechanism to convert any device to a Supervised device using the Apple Configurator2 (AC2) software. In this guide we will walk you through on how to make the device a Supervised and enroll into Scalefusion Dashboard at the same time.

Goals

  1. Make the device Supervised.
  2. Enroll the device to Scalefusion Dashboard.
NOTE: During this process the data on the device will be erased. Please take a backup of the data.

Before you Begin

  1. Make sure you have valid Scalefusion Dashboard account.
  2. You have created an iOS Device Profile in Scalefusion Dashboard.
  3. You have created a QR Code configuration in Scalefusion Dashboard.
  4. You have created a Wifi configuration on Scalefusion Dashboard. The Wifi config will be used during AC2 provisioning.
    Wifi configuration can be created from All Configurations > Global Settings > Wifi Settings or can be added at the time of creating QR code configuration for iOS/macOS.
  5. You have an iPhone or iPad and a lightning USB cable.
  6. You have a Mac computer with Apple Configurator 2 installed.
  7. Backup your iPhone or iPad data as the process is going to erase the device.
  8. Sign out of the iTunes Account and iCloud if you are signed into
If you try to set up the device without signing out then the device will be activation locked and will ask you for the iTunes account and password after reset, and will not allow you to complete the setup.
If you would want to Supervise a iOS Device without data loss or restore a backup, please follow Supervising iOS device without Data Loss.

Video Guide:

Please watch the video below to get a visual walkthrough.

The video may show legacy QR Code view. Please use the steps to get the URL to be used with AC2 tool.

Steps

On Scalefusion Dashboard

  1. Login to Scalefusion Dashboard.
  2. Navigate to Enrollment Configurations > QR Code Configurations. Expand the QR Code that you want to enrol the iPhone into.
  3. Under the iOS tab, copy the AC2 Enrollment URL either by:
    1. Clicking Show iOS QR
    2. From the bottom when you expand the configuration.

On Mac Machine

  1. Connect your iOS device to your Mac machine.
  2. Launch Apple Configurator 2. Click on Trust if your mac machine shows the prompt.
  3. You should see your device in the AC2 tool.
  4. Right click on the device frame that you see in AC2.
  5. Select Prepare.
  6. You will see a screen with the following options, make sure you have selected the following options,
    1. From the Prepare With dropdown, select Manual Configuration.
    2. Uncheck Add to Device Enrollment Program.
    3. Check Supervise Devices.
    4. Check Allow Devices to Pair with other computers.
    5. Uncheck Enable Shared iPad.
  7. Click Next.
  8. Here you will be asked to choose if you want to Enroll into an MDM or Not. Choose New Server from the server dropdown. Click Next.
  9. You will be shown a screen to Define the MDM server.
    1. In the Name field enter Scalefusion.
    2. In the URL field enter the URL that you had copied from Scalefusion Dashboard.
    3. Click Next.
  10. AC2 will validate the URL and ask you to confirm if you trust the server. Click Next.
  11. You will be asked to enter the Apple-Id. Click Skip.
  12. You will be asked to enter the Organization details. This is your organization details so enter the relevant fields and click Next.
  13. You can choose a Supervisioning identity, that is what are the options that you want to skip during erase and setup. Choose an existing one or define a new one.
  14. Once you are ready, Click Prepare.
  15. Click Erase on the warning that appears. This will Erase the date so make sure that you have taken a backup of data.
  16. The device will now reboot and enroll to Scalefusion and at the same time become supervised.
For supervising devices and quickly enrolling them to Scalefusion, you can also opt for Apple's DEP process

Frequently Asked Questions

Question: If I have multiple devices, do I have to repeat the above steps for each one of them?

Answer: Technically Yes. Each device needs to be supervision'ed separately. However Apple Configurator 2 can detect multiple devices, so you can use a USB Hub and connect multiple iOS devices. Once all the devices appear in Apple Configurator 2, hold down the shift key to select those devices and then perform the same steps as mentioned above. 

Question: Can I just make the devices Supervised first and enroll to Scalefusion later?

Answer: Yes. In-fact if you are enrolling multiple devices at one shot using a USB Hub then we would recommend that you select "Do Not Enroll in MDM" ate step 8 above and skip step 9 and 10. This will erase the device and make it supervised, you can then Enroll the device using QR Code.

Question: How do we retain or restore the date on the Supervised device?

Answer: Restoring a backup on Supervised device is not possible. However you can perform some special steps to restore the backup and Supervise the device at the same time. Please follow our Supervise iOS Devices without Data Loss guide.


How did we do?


Powered by HelpDocs (opens in a new tab)