Managing Supervised iOS Devices using Apple Configurator

Before you begin

  • Ensure that you have a Mac running macOS 14.0 or later.
  • Have access to your Apple Business Manager and SOTI MobiControl credentials.
  • Confirm that your devices are compatible with Apple Configurator. See the Apple Configurator User Guide for Mac.

About this task

Use Apple Configurator to prepare iOS devices for supervised enrollment into SOTI MobiControl via Apple Business Manager (ABM). This method links devices to your ABM account, enabling automated Mobile Device Management (MDM) assignment and seamless provisioning through SOTI MobiControl.

Supervising iOS devices provides IT administrators with greater control and flexibility during enrollment and management. Supervised mode is essential when deploying organization-owned devices at scale. For more details, see the ABM User Guide.

Key benefits include:

  • Enables advanced management features such as silent app installation and enforced configurations.

  • Prevents users from removing MDM profiles, ensuring compliance and consistent device management.

  • Supports zero-touch deployment via ABM, streamlining provisioning.

  • Strengthens security by restricting access to system settings and disabling non-essential features.

Manage Supervised iOS Devices through Apple Configurator 2 [VIDEO]
Manage Supervised iOS Devices through Apple Configurator 2
Enroll iOS Devices via Apple Business Manager [VIDEO]
Enroll iOS Devices via Apple Business Manager

Procedure

  1. Connect the iOS device to a Mac using a USB cable.
  2. Open Apple Configurator and select Prepare, the Prepare Devices window opens.
  3. In the configuration options:
    • Select Supervise devices.
    • Select Add to Apple School Manager or Apple Business Manager.
    • Deselect Activate and complete enrollment.
  4. Select Next, the Enroll in MDM Server window opens.
  5. Select New Server.
  6. Enter a name, and provide the Fully Qualified Domain Name (FQDN) of your SOTI MobiControl or enrollment URL from the enrollment policy.
  7. Select Next.
  8. Upload the SOTI MobiControl root certificate.
  9. Select Next, the Assign to Organization window opens.
  10. Select New Organization and sign in using your ABM administrator credentials.
  11. When prompted, select a supervision identity.
    Note: The supervision identity is automatically generated.
  12. Select Next.
  13. Configure the Setup Assistant options.
  14. Select Next.
  15. Optional: Assign a network profile (Wi-Fi or corporate configuration).
    Note: For more details, see the Apple Configurator User Guide.
  16. Select Prepare, the device resets, provisions and is added to ABM.
    Important: Resetting the device erases all user data, settings, and installed applications. Back up any important information before proceeding.
  17. In ABM, verify that:
    • The device source is listed as Apple Configurator.
    • MDM assignment is linked to SOTI MobiControl.

Results

The device appears in ABM and is enrolled into SOTI MobiControl as a supervised device.

Manually Supervising Devices without ABM

Before you begin

  • Ensure that you are not using Automated Device Enrollment (ADE) for your enrollment policy.
  • Export the SSL certificate from the SOTI MobiControl web console.

About this task

Use Apple Configurator 2 to manually supervise iOS devices and enroll them into SOTI MobiControl without ABM. This method is suitable for organizations that do not use ADE or need to supervise devices outside of ABM work flows.

Manual supervision provides similar control over devices but requires additional setup, including certificate management and device-specific configuration.

Procedure

  1. Log into SOTI MobiControl web console.
  2. Navigate to the Main menu > Global Settings > Enrollment > Enrollment Rules.
  3. Set the default enrollment policy for the iOS platform.
  4. Connect the iOS device to a Mac using a USB cable.
  5. Open Apple Configurator.
  6. Select Prepare.
  7. Select Supervise devices.
  8. Select Next, the Define an MDM Server window opens.
  9. Select New Server.
  10. Provide a name, and enter the FQDN or enrollment URL from SOTI MobiControl.
  11. Select Next.
  12. Upload the SOTI MobiControl SSL certificate and root certificate.
    Note: Export the SSL certificate from the web console by selecting the secure certificate from the browser address bar.
  13. Select Next, the Sign in to Apple School Manager or Apple Business Manager window opens.
  14. Select Skip.
  15. Enter your organization information and generate a new supervision identity.
    Note: You need administrator credentials to create the certificate.
  16. Configure Setup Assistant settings, then select Prepare. Once the device connects to the internet, a Remote Management setup starts.
  17. Continue through the prompts to enroll the device into SOTI MobiControl.

Results

The device is supervised and enrolled in SOTI MobiControl.