Skip to content Skip to site navigation

Jamf for iOS Migration Project

Transitioning to Stanford's new MDM for Apple devices

About Jamf @ Stanford

Jamf @ Stanford is rolling out to all faculty and staff as the new Mobile Device Management (MDM) solution for Apple devices. By replacing Workspace ONE with Jamf, a more robust MDM solution,  we can enhance our level of support for mobile devices while improving overall security. This is part of the university’s Healthy Devices program, an ongoing effort to make our devices more secure and easier to use. 

Migrating to Jamf prepares your iPhone or iPad for a much smoother transition to modern email authentication to protect your Stanford email account with two-factor authentication. You'll be able to access Stanford networks, as well as email, calendar, and contacts,  without having to configure settings on your own. And your device will be compliant with Stanford’s security standards, so you can use Cardinal Key to access the services that require Cardinal Key from your mobile device. 

Before you begin

  • Confirm your device is running a supported operating system by visiting uit.stanford.edu/guide/sunset-schedule. To use the “Migrate” app, you’ll need to run iOS 13 or later. You can upgrade your iOS device by going to Settings → General → Software Update.
  • If you prefer a manual (instead of an app-facilitated) migration, follow the instructions in the "Manual Migration" section.
  • If your device is new or not enrolled in Mobile Device Management MDM), you don't need to migrate. Instead, follow these instructions to enroll your device. 
  • If you have a large amount of email in your native Mail app, it may take several hours to sync email during migration. To reduce or eliminate the wait, change the native Mail app setting before you start the migration to set your mail days to sync limit to 1 month (or less). To do this: Go to Settings > Mail > Accounts> Select Stanford Office 365 > Mail Days to Sync  and select "1 Month" (or less).
  • If you're unsure if your device is enrolled in an MDM, watch the video tutorial.

Migrate with the app

We've developed a custom "Migrate" app to facilitate your migration. The app will be deployed to your device. You can also download the it from the Stanford "App Catalog" on your phone. Installing the app doesn't start the migration process. Instead, you can open the app and begin the migration at your convenience.

  • For the best experience, ensure you have 10 minutes of uninterrupted time to complete the migration and your device has at least 15% battery life. If possible, connect to Wi-Fi. Have your two-step authentication (which in many cases will be the phone itself) nearby.
  • Watch this video tutorial to get familiar with the app migration process.
  • If your mail/calendar/contacts are unavailable during the Jamf migration, you can access them at via the webmail interface at https://webmail.stanford.edu.

When you're ready to begin, open the "Migrate" app and follow the prompts. It's important that you open this instructional documentation and refer to it as you go.

After you migrate

Once the migration is complete, you have the option to take a few extra steps.

  • You can delete the migrate app, as well as the Hub app, from your home screen.
  • The Self-Service and Microsoft Outlook apps will install as part of the migration.
    • The Microsoft app serves as an alternative to your native mail, calendar, and contact app. You can easily configure the Microsoft app for your Stanford calendar, email, and contacts.
    • Self-Service gives you access to a curated set of university-approved applications and configurations. Visit the Jamf website to learn more about Apple self-service.
    • Within a few hours, you should see the information updated in MyDevices to reflect that it is now managed by Jamf (vs. AirWatch/Workspace ONE).
  • Watch this video tutorial to learn more about post-migration device management.

Migrate manually

If you prefer a manual (vs. app-facilitated) migration, follow the instructions below to remove Workspace ONE and manually enroll your device into Jamf. If Stanford recently purchased your device, this option may not be available.

Frequently asked questions about migration

Will I lose personal data during migration? What happens to my email when I migrate to Jamf?
You will not lose personal data. During the migration, you will lose access to Stanford email, calendar, and contacts temporarily due to the removal of the WS1 configuration. However, you can access them via the webmail interface at https://webmail.stanford.edu.

Once your device is enrolled in Jamf, a new email configuration will be pushed to your device. After you provide your credentials, emails will download to your device. Additionally, you'll be offered to install a pre-configured Outlook or Gmail app as optional email clients to use alongside the native Mail app.
I started using the app, but can't complete the migration. What should I do?
If you were unable to migrate using the app, follow these steps to migrate manually.
I no longer use this device for Stanford work. Do I  still need to migrate?
No. If you do not use the device for Stanford work, you should follow these instructions to remove Workspace ONE. Remember, you’ll no longer be able to access your Stanford work email and calendar from the device.
My device is new or otherwise unmanaged. How do I enroll it into Jamf?
If your device is new or unmanaged, follow these instructions to enroll in Jamf.
I received a Profile Installation Failed error message when trying to install the Jamf profile. What does this mean?
If you received a pop-up error message that says, “The new MDM payload does not match the old payload.” This means you already have a Mobile Device Management (MDM) profile installed. You can only have one MDM on your device at a time. In Settings, Open the Profile of the installed Mobile Device Management and select Remove Management so that you can then enroll in the new Device provider (Jamf) and download that profile. Visit iOS Manual Migration to learn more.
I received an Untrusted Enterprise Developer message when opening the Migrate app. What does this mean?
This message is displayed because the previous management system deployed this custom-developed app and that management system is no longer on the device. If you have partially completed the migration and are stuck, please consult Step 2 of the manual migration instructions. You may delete the Migrate app after you have completed the migration, which is indicated by the Jamf Self Service App Installation prompt. Alternatively, you may go to Settings > General > Device Management menu to see the Stanford University, IT Services app installed. Click "Trust Stanford University, IT Services" and "Trust." You can now open/close the "Migrate" app as often as you'd like.
I've completed migration, but still can't access my email. What's wrong?
For some people, it may take a little longer to download this data. In the meantime, you can access your email in the web interface via webmail.stanford.edu.
Can I delete the Migrate app on my iOS device after I migrated?
Yes, it is safe to delete the "Migrate" app after migrating to Jamf.
I've downloaded the Migrate app and completed migration. Why do I now see the Outlook app?
We designed the Jamf Migrate app to automatically install the Outlook app as an alternative to your native mail, calendar, and contact app. When the migration is complete, you can configure your Stanford email, calendar, and contacts by tapping the "Add Account" button. Learn more about managing your device after the migration.
What is Self-Service App?
Included with Jamf enrollment or accessible via the App Store, Self-Service gives you access to a curated set of university-approved applications and configurations. The customizable Self-Service catalog features productivity, compliance, connectivity software, and more. You can install software or quickly configure your device without IT intervention by launching Self-Service from your mobile device. Visit the Jamf website to learn more about Apple self-service.
Note: The Self-Service app does not have access to view what apps you already have installed on your device, so you may see it offer an option to install an app you already have.

Get help

If you need help, please call the UIT Service Desk at 650-725-4357 (5-HELP) or submit a Help request.