Endpoint Services, Jamf Pro, Enrolling Devices into Jamf Pro
Systems
Jamf Pro
Affected Customers
University of Illinois IT Pros leveraging Technology Services Endpoint Services Jamf Pro
General Information
Once your unit has been provisioned in Jamf Pro, you may begin enrolling devices using one of the following methods and managing them in the Jamf Pro console.
- Automated Device Enrollment [ADE] / Device Enrollment Program [DEP] (iOS, macOS, tvOS and visionOS)
- Manual Enrollment (iOS and macOS)
Automated Device Enrollment [ADE] / Device Enrollment Program [DEP] (iOS, macOS, tvOS and visionOS)
Automated Device Enrollment (aka DEP), is the preferred method for enrolling eligible devices into Jamf Pro. To request that a DEP-eligible device be registered for automated enrollment, please submit an EPS support request, selecting Jamf Pro from the 'Service' dropdown, DEP Enrollment from the 'Request Type' dropdown, and completing all fields. For devices that are not DEP-eligible, EPS can enable DEP-eligiblity if certain conditions are met.
Learn more about Apple's Device Enrollment Program.
Ensure that your device purchases are DEP-eligible.
Manual Enrollment via Enrollment Server URL (iOS and macOS)
Devices that are not eligible for DEP can be manually enrolled into the Jamf Pro service using an enrollment URL, a process known as "profile-driven device enrollment" or "user-initiated enrollment via URL". During this enrollment method, users are prompted to download and approve an MDM profile. Computers running macOS 11 or later are automatically supervised after device enrollment. However, manually-enrolled iOS devices will not be supervised, which limits the MDM capabilities available for these devices. EPS recommends enrolling all devices via DEP when possible. For devices that are not DEP-eligible, EPS can enable DEP-eligiblity if certain conditions are met.
- Sign in to the device you wish to enroll
- Ensure that the device has a network connection (wired or wireless).
- Go to the Jamf Pro enrollment site, https://illinois.jamfcloud.com/enroll (this must be done on the device you're enrolling)
- When prompted for credentials, enter the email address and password for a member of your Enroll Users group; if you are not sure, contact Endpoint Services.
- If prompted to select a site, the user may choose a Jamf Pro site to associate their computer with.
- The user is prompted to install a profile containing the CA certificate before they install the MDM profile. The user must follow the onscreen instructions to install the CA certificate. After the CA certificate is installed, the user must return to their web browser to install the MDM profile and complete enrollment.
- When prompted, the user must click Continue to download and install the MDM profile.
Important: The user has eight minutes to install the MDM enrollment profile.
For iOS devices, iOS discards the enrollment profile after this time window closes. If this occurs, the user must restart the enrollment process from the beginning.
On macOS devices, the profile is no longer displayed in System Settings after this time window closes. If this occurs, the user must double-click the downloaded enrollment profile to install the MDM enrollment profile in System Settings.
- For iOS devices:
- A "Complete installation of this profile in the Settings app." message is displayed.
- Next, a Profile Downloaded dialog is displayed. The user must click Close, and then within the Settings app, navigate to General → VPN & Device Management and click the downloaded profile to complete the installation. The user may need to click Install multiple times to continue and must follow the onscreen instructions to trust the MDM profile, which may include entering their passcode, if one is required.
- For macOS 13 (Ventura) or macOS 14 (Sonoma) devices:
- When the downloaded profile is opened, the user is notified that a profile was downloaded and can be reviewed in the System Settings app.
- Within the System Settings app, the user must then navigate to Privacy & Security → Profiles, locate and select the downloaded MDM profile and click the Enroll button to finish the profile installation. Users are then prompted to trust the MDM enrollment profile and enter their local administrator account password to complete the MDM enrollment profile installation process.
- For macOS 15 (Sequoia) devices:
- When the downloaded profile is opened, the user is notified that a profile was downloaded and can be reviewed in the System Settings app
- Within the System Settings app, the user must then navigate to the Profile Downloaded window, locate and select the downloaded MDM profile and click the Enroll button to finish the profile installation. Users are then prompted to trust the MDM enrollment profile and enter their local administrator account password to complete the MDM enrollment profile installation process.
- If Profile Downloaded is not visible, navigate to General → Device Management instead.
- For iOS devices:
- When the user returns to the web browser, a message will be displayed indicating that the computer is enrolled with Jamf Pro.
