cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

DEP Supervision and iCloud Restoring

Highlighted
Here to help

DEP Supervision and iCloud Restoring

This is a weird one. We're using iCloud to backup a user's iPhone (unenrolled and unsupervised). From there, we're trying to then enroll/supervise the device into both DEP and Meraki (via Apple Configurator), which works successfully. However, when restoring from iCloud backup, this appears to remove the supervision. The device shows up in Systems Manager and on Apple Business Manager (under the MDM server, "Devices added by Apple Configurator 2"), but the iPhone shows no profiles installed on it, and Apple Configurator does not say the device is supervised.

 

Browsing around online, there seems to be some kind of way around this (see here: https://www.jamf.com/jamf-nation/discussions/24019/backup-devices-before-wiping-and-enrolling-throug...), but I can't quite figure out how to get this to work.

2 REPLIES 2
Kind of a big deal

Re: DEP Supervision and iCloud Restoring

When you restore the backup, you restore the supervision state (in this case you are restoring an unsupervised state). The workaround in the Jamf thread (and discussed here previously if you do a search), is to restore the backup to a *different* device. If you need the same device to be returned to a user, you could then do a backup of the different device and then restore it to the original device (which would retain the now supervised state). 

MRCUR | CMNO #12
Kind of a big deal

Re: DEP Supervision and iCloud Restoring

This is a known issue, which I believe Apple intended to be a fail safe.

 

Procedure:

 

Backup of device A

Restore it to Device B

Backup Device B

Restore it to Device A

 

Obviously, you have to properly enroll the devices into Apple Business (DEP), sync with Meraki and assign the DEP enrollment settings before the device activates.

Find this helpful? Click the kudos button. Thanks!
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels