Deploy KyberGate to your iPad fleet using Jamf Pro.
Prerequisites
- Jamf Pro instance with supervised iPads
- Your KyberGate org ID (find it in Settings > Proxy)
- iPads must be supervised (unsupervised iPads can remove profiles)
Step 1: Download the Profile
Download the pre-built configuration profile: https://proxy.kybergate.com/api/mdm/YOUR_ORG_ID
This profile includes the proxy PAC configuration and the CA certificate.
Step 2: Upload to Jamf
- In Jamf Pro, go to Configuration Profiles > New
- Upload the .mobileconfig file
- OR create manually: Proxies payload > Auto proxy type, PAC URL: https://proxy.kybergate.com/api/pac/YOUR_ORG_ID?email=$EMAIL&udid=$UDID
Step 3: Scope
Scope the profile to your target Smart Group or device group. Start with a small test group before rolling out to all devices.
Step 4: Trust the CA Certificate
The CA certificate in the profile needs to be trusted. In Jamf, create a separate Certificate payload if needed, or ensure the profile includes the trust settings.
Step 5: Restrictions (Recommended)
Add a Restrictions payload to prevent students from:
- Modifying proxy settings
- Installing VPN configurations
- Removing configuration profiles
Step 6: Verify
Push the profile, open Safari on a test iPad, and browse. Check your KyberGate dashboard — the device should appear within 60 seconds.