Apple configurator enrollment update#
Apple configurator enrollment download#

Apple configurator enrollment update#

If you’re looking to enroll a device through Apple Configurator after the certificates update is completed, the Apple Configurator profile will need to be updated to point to the new certificate. Note: Please follow the steps below only if new enrollment fails. Steps for new enrollments after February 10, 2021: This will ensure for a short period of time enrollment proceeds as necessary. On the 'Define an MDM Server' click the + icon and select the Baltimore CyberTrust Root from where you downloaded it.Select 'New Server' and paste the URL from step 4 into the 'Host name or URL' text box.Choose 'Manual Configuration' in the 'Prepare with:' drop down.In Apple Configurator 2, right click the device and select 'Prepare'.In the Microsoft Endpoint Manager admin center, under Home > Devices > iOS/iPadOS > Apple Configurator, select the profile, and then 'Export Profile'.In Safari, this can be done by clicking the padlock next to the URL, clicking 'Show Certificate', selecting Baltimore CyberTrust Root certificate and then dragging the large icon to the Desktop. NOTE: In Microsoft Edge or Chrome, this can be done by clicking the padlock next to the URL, clicking 'Certificate', selecting Baltimore CyberTrust Root certificate and then dragging the large icon to the Desktop. You can read more about getting the Baltimore Cybertrust root certificate here: Configure Trusted Roots and Disallowed Certificates | Microsoft Docs.

Apple configurator enrollment download#

Download the Baltimore CyberTrust Root certificate.

Here are the steps you’ll take on a macOS device per the instructions here: iOS/iPadOS device enrollment - Apple Configurator-Setup Assistant - Microsoft Intune | Microsoft Doc.: Steps for new enrollments between January 14, 2021- February 10, 2021:įor enrollment in the next few weeks until the new certificates described in MC225591 and also described in this blog post are fully deployed across the entire service, you’ll want to add the Baltimore CyberTrust Root Certificate back to the list of certificates in your profile to ensure that enrollment can complete through setup assistant. The error in device logs either indicates there’s no service response or enrollment can’t succeed so no errors are logged.

You have an enrollment profile that has worked historically to enroll new devices, but now those new devices (userless or user-based) fail enrollment.

You use Apple configurator – setup assistant – for enrollment.

However, if you plan to enroll new devices in the next few weeks there’s one set of steps post incident to enroll new devices, and then when the certificate update is completed, a quick profile update to ensure new enrollments are successful.

Existing devices remain enrolled as they have already established trust through the Apple configurator setup assistant workflow. Unfortunately, as part of this incident, we have confirmed that there is a certificate mismatch between Apple Configurator profiles and the Intune certificate issuing service for iOS/iPadOS enrollment through this setup experience. We recently posted IT234239 on the Service Health Dashboard. Only setup assistant workflow is impacted – all other iOS/iPad enrollment workflows are not affected. Blog Note – This only impacts the iOS/iPadOS device enrollment using Apple Configurator – Setup Assistant – as documented here: iOS/iPadOS device enrollment - Apple Configurator-Setup Assistant - Microsoft Intune | Microsoft Doc.