u/vellostha

iPads still running iOS 17.x have recently started seeing the following error during initial setup:

>“The configuration for your iPad could not be downloaded from xyz. The MDM server certificate for https://url/zdm/ios/otae/dobulkenrollment is invalid.”

Interestingly, both newer and older iPads running iOS 17.x are experiencing the issue after a wipe, whether the wipe is performed through MDM or via an iTunes restore.
All other iOS devices running iOS 18 and iOS 26 are enrolling successfully after a wipe.

The DEP token is valid, and these devices are enrolled through ADE. Has anyone seen this behavior? Any thoughts or suggestions on what else we should check?

https://preview.redd.it/e501uls5r0jh1.jpg?width=2018&format=pjpg&auto=webp&s=80790b7037d7160ae3820943a05e0d87728e3bfb

I’m new to Jamf and looking for some guidance on configuring Shared iPads. I have a separate PreStage enrollment configured specifically for Shared iPads in Jamf Pro. (Sorry for the wall of text)

A few questions:

1. For Shared iPads, can I scope the same restriction profiles/Blueprints that I have for standard 1:1 iOS devices? For example, restrictions such as blocking iCloud, content filtering, lock screen messages, etc.

2. I understand that Web Clips must be deployed at the user level, and passcode policies depend on whether Managed Apple IDs are federated. We don’t use federation, so am I correct in assuming that a passcode policy is not required for Shared iPads?

3. What about VPP apps? Can I simply scope my existing VPP apps to the Shared iPad device group, or are there any special considerations for Shared iPads?

4. Finally how to manage iOS updates for shared devices? Use blueprints/profiles? How do they work?

Unsure if I am missing any key points for shared devices configuration, but please address them here. Thanks in advance for any advice or best practices!

I’m new to Jamf and looking for some guidance on configuring Shared iPads. I have a separate PreStage enrollment configured specifically for Shared iPads in Jamf Pro. (Sorry for the wall of text)

A few questions:

1. For Shared iPads, can I scope the same restriction profiles/Blueprints that I have for standard 1:1 iOS devices? For example, restrictions such as blocking iCloud, content filtering, lock screen messages, etc.

2. I understand that Web Clips must be deployed at the user level, and passcode policies depend on whether Managed Apple IDs are federated. We don’t use federation, so am I correct in assuming that a passcode policy is not required for Shared iPads?

3. What about VPP apps? Can I simply scope my existing VPP apps to the Shared iPad device group, or are there any special considerations for Shared iPads?

4. Finally how to manage iOS updates for shared devices? Use blueprints/profiles? How do they work?

Unsure if I am missing any key points for shared devices configuration, but please address them here. Thanks in advance for any advice or best practices!