Make sure the Apple TV is at the first screen of the Setup Assistant that says Pair Your Remote. Launch Apple Configurator 2. From the Apple Configurator 2 menu, choose Paired Devices. Select your Apple TV in the Paired Devices list and click Pair. Enter the 6-digit personal identification number (PIN) that appears on the screen of your Apple TV. I just did this to get Configurator 2.7.1 installed on my Mac running 10.13.6. Today, Apple kicked off WWDC 2017, where it announced the next major updates for iOS, macOS, and watchOS, with tvOS news coming later this week.As usual, all of the Developer Beta builds are. Apple Configurator 2 for PC and Mac. Written by Apple. Category: Utilities Release date: 2021-04-28 Licence: Free Software version: 2.14 File size: 47.10 MB Compatibility: Available on Windows 10, Windows 8.1/8, Windows 7, Windows Vista and Mac OS 10-11 10.14.6.
- Apple Configurator 2 Os 10.13 Free
- How To Install Apple Configurator 2 On Mac
- Apple Configurator 2 Os 10.13 Downloads
- Apple Configurator 2 Os 10.13 Update
Apple Configurator makes it easy to deploy iPad, iPhone, iPod touch, and Apple TV devices in your school or business. Use Apple Configurator to quickly configure large numbers of devices connected to your Mac via USB with the settings, apps, and data you specify for your students, employees, or customers. Apple configurator apple configurator for windows Apple Configurator For Mac Os X 11.13 ★★★★★ DOWNLOAD macOS Big Sur elevates Mac to a new level of power and beauty with a refined new design, major app updates, and more transparency Read More.
-->Intune supports the enrollment of iOS/iPadOS devices using Apple Configurator running on a Mac computer. Enrolling with Apple Configurator requires that you USB-connect each iOS/iPadOS device to a Mac computer to set up corporate enrollment. You can enroll devices into Intune with Apple Configurator in two ways:
- Setup Assistant enrollment - Wipes the device and prepares it to enroll during Setup Assistant.
- Direct enrollment - Does not wipe the device and enrolls the device through iOS/iPadOS settings. This method only supports devices with no user affinity.
Apple Configurator enrollment methods can't be used with the device enrollment manager.Note- Enrolling devices with Apple Configurator is only applicable to iOS/iPadOS Devices. This method does not work for enrolling macOS devices.
Prerequisites
- Physical access to iOS/iPadOS devices
- Device serial numbers (Setup Assistant enrollment only)
- USB connection cables
- macOS computer running Apple Configurator 2.0
Create an Apple Configurator profile for devices
A device enrollment profile defines the settings applied during enrollment. These settings are applied only once. Follow these steps to create an enrollment profile to enroll iOS/iPadOS devices with Apple Configurator.
Apple Configurator 2 Os 10.13 Free
In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator.
Choose Profiles > Create.
Under Create Enrollment Profile, type a Name and Description for the profile for administrative purposes. Users do not see these details. You can use this Name field to create a dynamic group in Azure Active Directory. Use the profile name to define the enrollmentProfileName parameter to assign devices with this enrollment profile. Learn more about Azure Active Directory dynamic groups.
For User Affinity, choose whether devices with this profile must enroll with or without an assigned user.
Enroll with user affinity - Choose this option for devices that belong to users and that want to use the company portal for services like installing apps. The device must be affiliated with a user with Setup Assistant and can then access company data and email. Only supported for Setup Assistant enrollment. User affinity requires WS-Trust 1.3 Username/Mixed endpoint. Learn more.
Enroll without User Affinity - Choose this option for devices unaffiliated with a single user. Use this for devices that perform tasks without accessing local user data. Apps requiring user affiliation (including the Company Portal app used for installing line-of-business apps) won't work. Required for direct enrollment.
Note
When Enroll with user affinity is selected, make sure that the device is affiliated with a user with Setup Assistant within the first 24 hours of the device being enrolled. Otherwise enrollment might fail, and a factory reset will be needed to enroll the device.
If you chose Enroll with User Affinity, you have the option to let users authenticate with Company Portal instead of the Apple Setup Assistant.
Note
If you want do any of the following, set Authenticate with Company Portal instead of Apple Setup Assistant to Yes.
- use multifactor authentication
- prompt users who need to change their password when they first sign in
- prompt users to reset their expired passwords during enrollment
These are not supported when authenticating with Apple Setup Assistant.
Choose Create to save the profile.
Setup Assistant enrollment
Add Apple Configurator serial numbers
Create a two-column, comma-separated value (.csv) list without a header. Add the serial number in the left column, and the details in the right column. The current maximum for the list is 5,000 rows. In a text editor, the .csv list looks like this:
F7TLWCLBX196,device details
DLXQPCWVGHMJ,device detailsLearn how to find an iOS/iPadOS device serial number.
In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator > Devices > Add.
Select an Enrollment profile to apply to the serial numbers you're importing. If you want the new serial number details to overwrite any existing details, choose Overwrite details for existing identifiers.
Under Import Devices, browse to the csv file of serial numbers, and select Add.
Reassign a profile to device serial numbers
You can assign an enrollment profile when you import iOS/iPadOS serial numbers for Apple Configurator enrollment. You can also assign profiles from two places in the Azure portal:
- Apple Configurator devices
- AC profiles
Assign from Apple Configurator devices
- In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator > Devices > choose the serial numbers > Assign profile.
- Under Assign Profile, choose the New profile you want to assign, and then choose Assign.
Assign from profiles
- In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator > Profiles > choose a profile.
- In the profile, choose Devices assigned, and then choose Assign.
- Filter to find device serial numbers you want to assign to the profile, select the devices, and then choose Assign.
Export the profile
After you create the profile and assign serial numbers, you must export the profile from Intune as a URL. You then import it into Apple Configurator on a Mac for deployment to devices.
In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator > Profiles > choose the profile to export.
On the profile, select Export Profile.
Copy the Profile URL. You can then add it in Apple Configurator to define the Intune profile used by iOS/iPadOS devices.
Next you import this profile to Apple Configurator in the following procedure to define the Intune profile used by iOS/iPadOS devices.
Enroll devices with Setup Assistant
On a Mac computer, open Apple Configurator 2. In the menu bar, choose Apple Configurator 2, and then choose Preferences.
Warning
Devices are reset to factory configurations during the enrollment process. As a best practice, reset the device and turn it on. Devices should be at the Hello screen when you connect the device.If the device was already registered with the Apple ID account, the device must be deleted from the Apple iCloud before starting the enrollment process. The prompt error appears as 'Unable to activate [Device name]'.
In the preferences pane, select Servers and choose the plus symbol (+) to launch the MDM Server wizard. Choose Next.
Enter the Host name or URL and enrollment URL for the MDM server under Setup Assistant enrollment for iOS/iPadOS devices with Microsoft Intune. For the Enrollment URL, enter the enrollment profile URL exported from Intune. Choose Next.
You can safely disregard a warning stating 'server URL is not verified.' To continue, choose Next until the wizard is finished.Connect the iOS/iPadOS mobile devices to the Mac computer with a USB adapter.
Select the iOS/iPadOS devices you want to manage, and then choose Prepare. On the Prepare iOS/iPadOS Device pane, select Manual, and then choose Next.
On the Enroll in MDM Server pane, select the server name you created, and then choose Next.
On the Supervise Devices pane, select the level of supervision, and then choose Next.
On the Create an Organization pane, choose the Organization or create a new organization, and then choose Next.
On the Configure iOS/iPadOS Setup Assistant pane, choose the steps to be presented to the user, and then choose Prepare. If prompted, authenticate to update trust settings.
When the iOS/iPadOS device finishes preparing, disconnect the USB cable.
Distribute devices
The devices are now ready for corporate enrollment. Turn off the devices and distribute them to users. When users turn on their devices, Setup Assistant starts.
After users receive their devices, they must complete Setup Assistant. Devices configured with user affinity can install and run the Company Portal app to download apps and manage devices.
Direct enrollment
When you directly enroll iOS/iPadOS devices with Apple Configurator, you can enroll a device without acquiring the device's serial number. You can also name the device for identification purposes before Intune captures the device name during enrollment. The Company Portal app is not supported for directly enrolled devices. This method does not wipe the device.
Apps requiring user affiliation, including the Company Portal app used for installing line-of-business apps, cannot be installed.
Export the profile as .mobileconfig to iOS/iPadOS devices
In the Microsoft Endpoint Manager admin center, choose Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple Configurator > Profiles > choose the profile to export > Export Profile.
Under Direct enrollment, choose Download profile, and save the file. An enrollment profile file is only valid for two weeks at which time you must re-create it.
Transfer the file to a Mac computer running Apple Configurator to push directly as a management profile to iOS/iPadOS devices.
Prepare the device with Apple Configurator by using the following steps:
On a Mac computer, open Apple Configurator 2.0.
Connect the iOS/iPadOS device to the Mac computer with a USB cord. Close Photos, iTunes, and other apps that open for the device when the device is detected.
In Apple Configurator, choose the connected iOS/iPadOS device, and then choose the Add button. Options that can be added to the device appear in the drop-down list. Choose Profiles.
Use the file picker to select the .mobileconfig file that you exported from Intune, and then choose Add. The profile is added to the device. If the device is Unsupervised, the installation requires acceptance on the device.
Use the following steps to install the profile on the iOS/iPadOS device. The device must have already completed the Setup Assistant and be ready to use. If enrollment entails app deployments, the device should have an Apple ID set up because the app deployment requires that you have an Apple ID signed in for the App Store.
- Unlock the iOS/iPadOS device.
- In the Install profile dialog box for Management profile, choose Install.
- Provide the Device Passcode or Apple ID, if necessary.
- Accept the Warning, and choose Install.
- Accept the Remote Warning, and choose Trust.
- When the Profile Installed box confirms the profile as Installed, choose Done.
On the iOS/iPadOS device, open Settings and go to General > Device Management > Management Profile. Confirm that the profile installation is listed, and check the iOS/iPadOS policy restrictions and installed apps. Policy restrictions and apps might take up to 10 minutes to appear on the device.
Distribute devices. The iOS/iPadOS device is now enrolled in Intune and managed.
What is Apple Configurator ?
Apple Configurator is a free utility tool that enables configuring, enrolling and deploying corporate-owned iOS, iPadOS and tvOS devices in the enterprise through a USB connection. Apple Configurator aids in the automated bulk enrollment of Apple devices using MDM and pre-loading the devices with the associated profiles and distributed apps before handing them out to users.
How To Install Apple Configurator 2 On Mac
Apple Configurator 2 is the latest version of this tool available that makes the deployment process of corporate iOS devices easier and more efficient. You can also assign users to devices and supervise them, exercising additional control. Administrators can enforce mobile security on managed devices by importing existing profiles or creating new configuration profiles using Apple Configurator 2. You can use Apple Configurator 2 to enroll devices not purchased directly from Apple or its reseller with ABM as explained here.
Similarly, Mobile Device Manager Plus also supports enrollment of Apple TV using Apple Configurator 2. Follow the steps given here to learn how to use Apple Configurator 2 to enroll Apple TV.
Benefits of integrating MDM with Apple Configurator 2
The benefits of using Apple Configurator 2 is mentioned below:
Push predefined configurations for corporate iOS devices.
Automatic enrollment with Mobile Device Manager Plus.
Enroll devices in bulk.
Advanced control over the Supervised devices. For more details on Supervised devices and their benefits, refer this.
| We have made your job simpler! Learn how to set up and use Apple Configurator 2 in just 3 minutes through this demo video. |
How to enroll iOS devices using Apple Configurator?
Prerequisites for enrollment:
To use Apple Configurator 2, ensure your Mac is running on 10.7 or later versions of operating systems.
It is recommended to update your iTunes before installing the Apple Configurator Utility.
Apple Configurator 2 with MDM can be used only for devices running iOS 6 or later versions. If any device with lower versions is used, then the Operating System of the devices are automatically upgraded to the latest.
You can use Apple Configurator 2 to enroll multiple devices at the same time. Follow the steps mentioned below to learn how to use and enroll multiple devices using Apple Configurator.
Prepare Apple Configurator 2.0
After installing the Apple Configurator 2, you have to follow the steps mentioned below to Prepare Apple Configurator2.0:
- On Apple Configurator 2, click File, select New Profile and then select Wi-Fi. Do not modify any other profiles as this might affect the profiles distributed using MDM.
- Create a Wi-Fi profile and save it.
- Click File and choose New Blueprint and name it.
- Open the newly created Blueprint and click Profiles, you have to add the newly created Wi-Fi profile (which was created in step #2).
- Right-click and choose Prepare as shown in the below image.
- Specify the Configuration Type as Manual. If you wish to add mobile devices into your Apple Business Manager (ABM) portal from Apple Configurator 2, enable the Add to Device Enrollment Program option. Learn how, from this document.
- Add the new server details by specifying the Server Name and Enrollment URL, configured in the MDM server.
- Trust anchor certificates are automatically added. If Apple Configurator takes too long to fetch anchor certificates, skip and proceed directly to the Assign to organization step by clicking on Next.
- Specify the name and details of the organization by creating a new organization on Apple Configurator 2.
- Choose Generate a new supervision identity to create a new Supervision identity on Apple Configurator 2.
- If you had enabled the option to add devices to DEP using Apple Configurator, enter your ABM account credentials
- Configure iOS setup assistant by clicking Prepare.
- Once the configuration on Apple Configurator 2 is done, connect the devices to a Mac through USB. Now in Apple Configurator, select the device, choose the created blueprint and add it to the device to be enrolled. Once this is done, the device restarts and the process is completed by accepting the created profile in the device. After completion, the device gets added to the MDM Server from where the device can be assigned to the user.
Enroll Devices to the MDM server from Apple Configurator
In order to enroll devices, you have to specify the ME MDM server URL on Apple Configurator 2. You can find theURL, in the below-mentioned location:
- On the MDM Product server console, choose Enrollment.
- Under iOS choose Apple Configurator.
- Select Configuration Steps, navigate to the fifth slide and copy the URL.
- On Apple Configurator 2, provide the URL copied from the MDM server.
Apple Configurator 2 Os 10.13 Downloads
Assign Users
You can see all the devices are listed in the MDM server, under Apple Configurator. You can assign the devices to appropriate users. Once the users are assigned, you can seethe devices listed under Managed devices view on the MDM server.
Apple Configurator 2 Os 10.13 Update
Troubleshooting Tips
- During device activation, you encounter the error A cloud configuration is already present on this device [mctunnelerrordomain – 0x36b2 (14002)].
Connect the device back to Apple Configurator. Right-click the device and select Restore. This re-downloads configurations into the device and fixes the problem.
- While configuring the Blueprint on Apple Configurator, you are prompted to enter the Apple ID and password and are unable to skip this step.
This is a default screen which appears while configuring a Blueprint. You cannot skip this step if you have enabled the option to Add device to DEP portal in the first step. If you do not want to add the devices to ABM, uncheck the option and skip the step requesting for Apple credentials. Else, enter the ABM portal details and click on Next.
- When you choose Apply Configuration on Apple Configurator, you encounter a Session Time Out error.
In this case, verify the Internet connectivity and retry applying configuration on Apple Configurator.
- While configuring the Blueprint, the screen gets stuck on Fetching Anchor Certificates or if the Certificates are not fetched
You can safely click on Next as this step does not affect the blueprint creation.
- You are trying to enroll a device and get an unexpected error with Failed to retrieve IMEI.
This error occurs when the device is already enrolled with Apple Configurator or when you enroll different types of devices like iPhones and iPads consecutively using Apple Configurator. Since an iPhone has an IMEI number (which is required for enrollment in some cases), it is automatically detected and the enrollment is completed. Since an iPad does not have an IMEI number this error is shown. Restore the device and try enrolling it again.
NOTE: Certain iPads do have the IMEI number while enrolling, in which case this error does not occur. - You are trying to enroll a device and encounter the error The device does not recognize the host.
This error occurs when the restriction Allow iTunes pairing and other USB connections have been applied to the device. This restriction prevents the connection with all other devices except the one used for Supervising it. Remove the restriction from the device or enroll using the machine previously used for Supervising the device.
- If you are trying to enroll devices not purchased from Apple or authorized resellers.
Apple now allows adding ios 11 devices not purchased directly from Apple or authorized resellers into ABM. Follow the steps given here to use Apple Configurator to add devices to ABM.
- While enrolling a device you encounter an error 'An unexpected error has occurred. Invalid Profile [MCProfileErrorDomain - 0x3E8 (1000) ]
This error Invalid Profile [MCProfileErrorDomain - 0x3E8 (1000) ] occurs on Apple Configurator 2 if the device is currently enrolled in a different MDM solution. Remove the device from the MDM solution, factory reset, and try enrolling the device again to resolve the error Invalid Profile [MCProfileErrorDomain - 0x3E8 (1000) ].
- If you're trying to add a device to DEP/ABM/ASM via Apple Configurator and receive the error An unexpected error has occurred: The device returned an unexpected status. (CommandFormatError) [com.apple.configurator.MobileDeviceKit.error – 0xfffffffff8028014...]
You might encounter the error The device returned an unexpected status. (CommandFormatError) [com.apple.configurator.MobileDeviceKit.error – 0xfffffffff8028014...] only if the device cannot be upgraded to iOS 11 (refer this to know the list of iOS devices supporting iOS 11) or the device needs to be upgraded to iOS 11 manually and then added to DEP/ABM/ASM via Apple Configurator.
- Unable to verify the server’s enrollment URL. A server with the specified hostname could not be found.
This message is shown on Apple Configurator when the MDM server is not reachable or the correct host URL is not entered. Verify if the MDM server, the Mac machine running Apple Configurator, and the devices to be enrolled are in the same network. Also, ensure that the host URL which is available on the MDM server, is entered correctly.
- While performing provisional enrollment of devices not purchased from authorized resellers, you receive the error Provisional enrollment failed: device is already in Device Enrollment Program.
This error on Apple Configurator Provisional enrollment failed: device is already in Device Enrollment Program occurs when the device you are trying to enroll is already available in the ABM portal. Check if the device is available in the server titled Devices Added by Apple Configurator 2 or is assigned to a different server in the ABM portal.
- While performing provisional enrollment of devices not purchased from authorized resellers, you receive the error Provisional enrollment failed: Network error.
This error on Apple Configurator, Provisional enrollment failed: Network error occurs when the device you are trying to enroll is already available in the ABM portal. Check if the device is available in the server titled Devices Added by Apple Configurator 2 or is assigned to a different server in the ABM portal. If you are unable to find the device, try connecting to a different network to enroll the device.
- While adding devices to the ABM portal via Apple Configurator you encounter the error 'Provisional enrollment failed... The Cloud configuration server is unavailable or busy [MCCloudConfigurationErrorDomain - 0x80EF (33007)]'.
This error, Provisional enrollment failed... The Cloud configuration server is unavailable or busy [MCCloudConfigurationErrorDomain - 0x80EF (33007)], is shown on Apple Configurator if the device is unable to contact the ABM server. Factory reset the device and proceed until the Wi-Fi configuration step. Prepare the device using Apple Configurator and follow the steps for adding it to ABM.
- Why are my devices not listed under ABM tab when I add the devices to ABM using Apple Configurator?
When devices are enrolled to ABM using Apple Configurator, the devices will be initially listed under Apple Configurator tab even though they are added to the ABM portal. When the user assignment is complete, these devices will be moved to Managed devices tab.
- While enrolling devices to the Device Enrollment Program or Apple Business Manager, you encounter an error Apple Configurator 2 cannot access the Device Enrollment Program
You may encounter this error Apple Configurator 2 cannot access the Device Enrollment Program if there are network issues due to which https://mdmenrollment.apple.com is not reachable or when the Apple servers are down. Verify your network connectivity and try again after sometime.
This happens only if the device cannot be upgraded to iOS 11 (refer this to know the list of iOS devices supporting iOS 11) or the device needs to be upgraded to iOS 11 manually and then added to DEP/ABM/ASM via Apple Configurator.