Apple Configurator with the Device Enrollment Program

You may optionally use Apple Configurator in conjunction with the Apple's Device Enrollment Program.

Use both of these deployment programs together to automate device enrollment, add Supervision, prevent the removal of an MDM profile, and to add supervised identities to devices.

Supervised Identities for Configurator Devices

Apple Configurator allows you to supervise devices and pair them with other Apple Configurator workstations.

Each workstation must also have a matching supervision identity for authentication. The identity is applied to devices when enrolled using a DEP profile or paired with an Apple Configurator workstation. If the wrong identity is applied to a device, the device must be device wiped to change the identity

Create a Supervision Identity for Apple Configurator

Create a supervision identity to add your organization's information to devices so that it will appear for users. Then, add supervision identities to other Apple Configurator workstations to securely configure devices.

1. Navigate to Apple Configurator > Settings > Organizations.

2. Click + button to add organization or create a new supervision identity.

3. Follow the prompts to create a new supervision identity.

4. Click the - button to remove an organization.

   Note: The certificates and private keys for the identity are in the login and system keychain files. If you want to remove them from your Mac, use Keychain Access.

5. Click the More button to:

   • Import an organization
   • Export an organization
   • Export a supervision identity