UCSB Jamf - Manual Enrollment Procedure
Contents
This procedure based off the procedure maintained for the ITSS Support teams, but the same general method may be used to manually enroll a MacOS device in any UCSB Jamf Site. Note the following:
During site selection, be sure to select your department’s particular UCSB Jamf site.
To skip site selection, avoiding errors by end-user enrollments, you can also use Jamf to send Site-specific enrollment invitation links via email.
Requirements:
- Local administrative permissions on the computer to be enrolled.
- Apple computer running MacOS Ventura, Sonoma, or Sequoia.
- Active UCSBnetID and UCSBnetID@ucsb.edu email
On the computer being enrolled, use Safari or Chrome to navigate to https://ucsb.jamfcloud.com/enroll:
Authenticate using your UCSBNetID credentials (and Duo if prompted). Note that any user with valid UCSBNetID credentials can perform Computer enrollment:
Use the dropdown to specify the Jamf site the computer should be assigned to. CECI = College of Engineering (don’t use “None”!)
If an incorrect Jamf Site has been selected during enrollment, submit a Jamf Request specifying the serial number and desired Site; the EUCE team will reassign the computer accordingly.If there is no drop down and you are using the URL instead of an invite: STOP!
Quit the safari window and then open up a new safari window in "private browsing"
If no drop down is shown, that means its auto assigning you to a group and it most likely is going to be the wrong groupPlease be very careful at this step, if you are unsure of what to pick, stop and email ECI (help@engineering.ucsb.edu) or your departmental IT person.
Errors at this step can result in days of delay. While most members of the College of Engineering will be under CECI, not all will be.
Members of BioE, CNSI, ECE, IEE, MECE and MRL may be under multiple sites depending on funding and group and thus should always check before picking.
- Specify a full UCSBNetID email address for the device assignee if you do not wish to self-assign it; the magnifying glass should be clicked to search valid accounts against UCSB identity. Simply typing a email in and clicking enter has caused errors, so always click the magnifying glass to avoid issues. A successful match will display a check mark at the right of the field. Note that technicians can adjust this later in Jamf Pro after enrollment. Click “Enroll” after the user and site are correct.
Click continue..
Your browser will download an MDM profile (“enrollmentProfile.mobileconfig”) to its default download location.
If you do not automatically see the following flyout notification, locate the downloaded mobileconfig file and double-click it to initiate installation (may be necessary if using Chrome):
To approve the MDM Profile, navigate to the Apple Menu | System Settings:
Search for “Profiles” to bring up the MDM Profile configuration panel, and double-click the “MDM Profile”:
Verify that the URL targets the Jamf service at “ucsb.jamfcloud.com” (last line below). If it targets any other server, stop here and contact ITSS EUCE or the campus IT security team.
Click “Install”:
Provide local administrative credentials to approve the profile installation and click “Enroll”.
Following successful enrollment, you will see a series of MDM configuration profiles apply (this will vary by site):
- Email help@engineering.ucsb.edu so a System Administrator can assign your computer to the appropriate departmental group within the College of Engineering instance. For example Computer Science has additional software only available to computer science students, faculty and staff. IEE, TMP, SSLEEC, ENMT and CHNE also have paid software that is not installed by default for computers in the general group for the College of Engineering.
- Please note there are several additional steps after being assigned to a group. For example, a reboot is required to encrypt computer hard drives and will generate a pop up the first time you sign in after said reboot. You will want to click yes for "enable FileVault". Your IT person will go over with you the specific steps for your department/group.