iMazing Configurator can be previewed extensively without a license. Simply download and install iMazing on your Mac, launch the app and click Configurator -> Preview iMazing Configurator Edition to get started:
In Preview mode, you can access all available features and fully configure blueprints, but you cannot apply blueprints to devices.
The iMazing Configurator license unlocks unlimited use of iMazing Configurator and of iMazing's standard feature set. It is available for direct purchase on our store:
If you're just getting started with iOS device management, the following article provides a general overview of key concepts and technologies: Understanding Supervision, MDM, DEP and VPP.
You're already experienced with iOS device management, or prefer to jump-in straight away and learn on the fly? Our iMazing Configurator: Quick Start Guide covers the bare essentials to get you going immediately. You can also watch the video below which covers the entire workflow, from scratch to deploying a blueprint to supervise devices, provision them with a PDF reader, add a PDF document and launch the app in Single App Mode:
iMazing Configurator is a set of tools designed to help sys admins configure and provision Apple mobile devices locally, as well as automate backup/erase/update tasks. It was developed in response to growing requests from our enterprise customers for a solution that could handle preparing and configuring both company and BYOD iOS devices whilst being mindful of the data they may contain.
iMazing Configurator is packaged within the macOS version of our iOS data management app iMazing. There is no separate download – the feature is unlocked via activation of iMazing with an iMazing Configurator Edition license code.
iMazing Configurator uses the same communication channels as Apple Configurator and relies on the same iOS technologies, but offers completely different workflows and quite a few additional features.
.blueprint
format.The full suite of iMazing Configurator tools is only available on macOS, but some of its most important features can also be found in the Windows version of iMazing (iMazing 2.11.6 and later).
Blueprints designed with the macOS version of iMazing can be exported in .blueprint
format, and can then be copied to a Windows terminal and applied directly to devices via iMazing's Quick Transfer wizard. Quick Transfer is a feature which works by identifying apps compatible with files you drop in iMazing. If iMazing detects that you are transferring a blueprint, it will offer to transfer it to Profiles, and apply the blueprint just as it would on macOS but without saving anything in iMazing's library.
.blueprint
file to the device detail view on the right of the windowThe Organizations view is fully available in the Windows version of iMazing. It is accessed via the Preferences window's Library tab.
Import your supervising organization here, or create an organization with your supervision identity, and you will be able to manage supervised devices with iMazing just like you would on macOS, including pairing devices which are configured with the allowHostPairing = false
restriction.
The Organizations view is implemented in the exact same way in the Windows and macOS versions of iMazing. See the Organizations section below for more details.
The iMazing Profile Editor app is available for Windows too and is identical in functionality to its macOS counterpart. The app is embedded within iMazing and can be launched via the Tools menu. See Getting Started with iMazing Profile Editor for more information.
Profiles can be browsed, extracted from devices and installed too. More details here: How to Manage Configuration Profiles.
Starting with iMazing 2.12, the standard version of iMazing features a Supervision wizard – learn more about supervising and managing supervised devices with iMazing.
The library view is the hub of iMazing Configurator. It can be accessed via the Configurator menu:
It is divided in 7 sections:
💡 Tip: you do not need to pre-configure anything before you create a blueprint, as the blueprint editor offers inline tools to import or create profiles, servers and organizations without having to return to the library.
By default, apps, blueprints and profiles are stored in /Users/{username}/Library/Application Support/iMazing/Library
.
This location can be changed from iMazing's Preferences window.
Organizations and devices are always located in
/Users/{username}/Library/Application Support/iMazing/Prefs
.
Because organizations and devices are treated as preferences, resetting iMazing to factory settings will remove them from iMazing Configurator's library. Organization certificates (i.e. supervising identities) are stored in the keychain and will persist a reset to factory settings.
In iMazing Configurator, Apple mobile devices are prepared and configured by applying blueprints. There is no Prepare action like in Apple Configurator 2. Instead, the blueprint editor neatly lays out all possible settings in one place. Here is the Blueprints Library:
From here, we can:
Learn more about creating and managing blueprints in the following guide: iMazing Configurator: Blueprints Deep Dive
The Devices tab of iMazing Configurator's library lists all iOS, iPadOS and tvOS devices which have been paired with the computer iMazing is running on. Use this screen to perform simple tasks on bulks of devices.
Choose which action to perform (Actions drop down menu at the top right), then select target devices and click Launch.
The following actions are available:
Note that the Devices view is very similar to the Operation Dispatcher View iMazing Configurator displays when applying blueprints or installing profiles from the library. To learn more about available options and behaviors, please refer to the corresponding guide: iMazing Configurator: Operation Dispatcher View
iOS or iPadOS backups you make with iMazing are in the exact same format as iTunes/Finder backups, with an added versioning layer to guard against accidental overwrites and maintain a history of backups. In iMazing's main window, the left sidebar displays aggregated backups and devices, which is convenient to browse data from a device, its backup or an earlier backup snapshot. In iMazing Configurator's library, the Backups tab only lists backups, in a table which lets you easily identify their location and size in order to locate a specific backup or batch delete unneeded ones:
The following fields are available:
Select a backup and click the Show Backup button at the lower right of the window. This will close the library window and select the backup or associated device in iMazing's left sidebar, allowing you to browse and export its contents and its snapshots. Learn more about accessing backup data in iMazing.
Select one or more backups, click the Delete button and confirm. This will delete both backups and related snapshots.
By default, iMazing lists all backups in its default backup location (/Users/{username}/Library/Application Support/iMazing/Backups
), and iTunes/Finder backups. Starting with Mojave, accessing iTunes/Finder backups require that you give iMazing Full Disk Access.
In iMazing's Preferences window, you can easily change iMazing's default backup location and load backups from other locations.
It is also possible to set the backup location of a specific device, overriding the configured default backup location.
It is important to understand that backup encryption is a setting residing on the iOS device itself, and it is iOS which encrypts files during the backup process. Therefore, once enabled, all future backups of the device, whether made with iTunes/Finder or iMazing, are encrypted (AES-256) with the same password.
In iMazing, you can configure the backup encryption password and other backup settings in the Device Options screen.
Backup password options are also available in the Actions section of blueprints, letting you perform encrypted backups before refurbishing iOS devices, or setting a backup password after configuration is applied.
When you first click on the Apps tab, iMazing will prompt you for Apple ID or Volume Purchase account credentials. These will not be uploaded or shared in any way, and will be securely stored in the keychain if you check the Remember password checkbox – read our Security & Privacy statement for more info.
Once you are signed in, iMazing will load a list of apps which you can download locally or install to connected devices.
iMazing Configurator's app library will adjust to the type of account you're signed in with and display appropriate options. There are also some differences in how apps are loaded and acquired.
If you sign in with a regular Apple ID, iMazing cannot list apps directly from your App Store account. It will list apps it has detected on devices you've connected to iMazing, and will display an Add from App Store button which lets you add apps to your library manually. Only apps which you've already acquired (including free apps) can be added.
If you sign in with an Apple Business Manager or Apple School Manager account, iMazing will list all apps you've purchased with that Volume Purchase account (free apps need to be 'purchased' too). A column labelled Assigned will list assigned versus purchased license counts, and the Manage Licenses button will replace the Add from App Store one. Here is the license management sheet:
Just like Apple Configurator, iMazing Configurator lets you manage device based license assignments but not user based license assignments. Serial numbers are used to assign a license to known devices.
💡 Tip: You can use the Devices view of iMazing Configurator's library to export in bulk serial numbers of devices known to iMazing.
When iMazing loads apps from your Volume Purchase account, it may display the following warning:
Volume Purchasing for this account is already managed by xxx.xxx. For your convenience, iMazing will perform device based license assignments and unassignments as needed, on behalf of xxx.xxx.
This occurs if you are already managing assignments of volume purchased apps or books with your MDM solution. In that case, iMazing will not take ownership of your account so as not to interfere with your current MDM solution, and license management will be performed on behalf of your MDM. You may need to refresh the apps view in your MDM for it to properly reflect license assignments performed by iMazing. Jamf Now, for example, features a Sync button to that effect.
If you are signed in to a Volume Purchase account, iMazing will automatically try to assign licenses when you install apps, and unassign them upon uninstallation. An error will occur if no more licenses are available.
💡 Tip: you can disable automatic license assignments in iMazing's Preferences window, Library tab.
Blueprints can be configured to install apps, add files to them, and set their configuration. Blueprints also can be configured to put the device in Single App Mode and whitelist or blacklist apps.
Maintaining a local library of apps with iMazing is already extensively covered in the following guide: Manage and Download Apps Without iTunes It describes iMazing's Manage Apps window, which displays the app library within the context of a specific device.
In the Profiles tab, you'll find configuration profiles (
.mobileconfig
) and provisioning profiles (.mobileprovision
) stored in iMazing Configurator's library, default path:
/Users/{user}/Library/Application Support/iMazing/Library/Profiles
💡 The profile library is also available in the standard version of iMazing, for both Mac and PC. Select the Library tab in the Preferences window and click Manage Profiles to open the library.
Click the + button to create a new profile, and double click an existing profile to edit it. In both cases, iMazing will launch iMazing Profile Editor, a separate app packaged with iMazing which offers advanced configuration profile editing tools. For more on our profile editor, see Getting Started with iMazing Profile Editor.
Drag profiles to the library to import them, or drag items out of the library to export. Importing a profile copies it to iMazing's Library folder.
Select the profiles you wish to install, and click the Install button at the bottom left of the window. iMazing will display the Operation Dispatcher View, allowing you to select target devices on which to install the profiles.
💡 Alternate workflow: profiles can also be installed directly from the Device Profiles view.
💡 User Consent: on supervised iOS devices, installing profiles only requires the device to be unlocked or passcode free. On non-supervised devices, iOS will prompt you to install downloaded profiles.
Configuration profiles are a vital part of blueprints. Please refer to the Profiles section of our iMazing Configurator: Blueprints Deep Dive article for more information.
To add one of your existing MDM servers to iMazing, click the + button and enter a name for that server. You then have 2 options to define how that server's MDM enrollment profile will be acquired:
Enter your server's open enrollment URL here. When you enroll devices via a blueprint, iMazing will either send the URL to the device for manual, user approved enrollment (Manual enrollment), or download the profile from that URL and install it directly (Zero-touch enrollment).
Not all MDM services expose an open enrollment URL. For this reason, it can be useful to associate an existing MDM profile with a server:
💡 Tip: when choosing an MDM profile in the Add Server view, iMazing will display your profile library with only MDM profiles listed.
When you configure a blueprint for MDM enrollment to server defined by an enrollment profile (and not an open enrollment URL), only Zero-touch enrollment will be available.
Click Enroll Devices, and iMazing will prompt you to select devices to enroll and confirm. Enrolling devices with this method downloads the enrollment profile if needed, and installs it on target devices. iOS may prompt you to confirm profile installation. This workflow is suitable to test open enrollment or to enroll a device without erasing it.
If your devices are enlisted in Apple's Device Enrollment Program (DEP), you do not need to add your MDM server to iMazing Configurator. Instead, you can leverage blueprints to streamline automated enrollment of bulks of devices.
It is also possible to enroll non-DEP devices whilst minimizing user interaction. See the above link for more information about the various enrollment modes available in the blueprint editor.
In the context of mobile device management, an organization is a digital certificate (the Supervision Identity) associated with metadata about the organization (name, department, address...). The certificate is used to supervise Apple mobile devices and establish a privileged link between iOS/iPadOS devices and their supervising hosts. iMazing follows industry standards in securing the handling of certificates:
.p12
) or .organization
(compatible with Apple Configurator 2)If you are not familiar with supervision, please refer to the Supervision Essentials section of our Blueprints Deep Dive article
Click the '+' button to create a new organization. Only an organization name is required, the other fields are optional. By default, iMazing will generate a new supervision identity and store it in the Keychain.
Click the '⌄' button and choose Import .organization File to import an organization exported from Apple Configurator 2 or iMazing Configurator.
If you need to add an organization to iMazing with an existing supervision identity (certificate), click the '+' button and use the Supervision Identity drop down to choose a certificate in PKCS12 format (.p12
or .pfx
) to associate with that organization, as illustrated in the following screenshot:
Click the ⌄ button and choose Export to .organization File to export the organization, including its supervision identity, as an Apple Configurator compatible .organization
file.
Click the ⌄ button and choose Export Supervision Identity to .p12 File to export the organization's certificate only.
In both cases, you'll be prompted for a password to protect the exported PKCS12 certificate.
💡 The organizations library is also available in the standard version of iMazing, for both Mac and PC. Select the Library tab in the Preferences window and click Manage Organizations to open the library.
A few features useful for sys admins can be found outside of the iMazing Configurator window, in the 'vanilla' iMazing window. These features are available without an iMazing Configurator Edition license.
You can configure a wealth of options, per device, by selecting a device in the sidebar and clicking the cogwheel icon:
Available options range from automatic backup and encryption to low battery notifications. They are described in detail in the following guide: Device Options in iMazing
The Device Settings panel is of particular interest in the context of iOS device management: from there, you can change the name, language and accessibility options of any device. For supervised devices, this panel becomes populated with additional options:
⚠ Important: The passcode unlock token's usefulness should not be overestimated. Once a device reboots, or if it is not unlocked for more than 24 hours, communication between the device and a computer becomes impossible until the device is unlocked at least once, negating the benefits of the Clear Passcode feature. This is the case even if the device is supervised, and even if USB Restricted Mode is disabled.
Here, you can browse provisioning and configuration profiles currently installed on a given device. This view makes it easy to quickly install profiles from the profile library, remove profiles in bulk, and even extract profiles to recover or examine them. The following article covers the Device Profiles view in detail: How to Install, Remove or Export iOS Provisioning and Configuration Profiles.
This view is especially useful when testing configuration profiles: the Install from Library button lets you pick a profile from iMazing Configurator's profile library presented as a sheet, where you can also easily edit profiles inline thanks to iMazing Profile Editor. Getting Started with iMazing Profile Editor.
iMazing's Preferences window features a few settings which can be very helpful for sys admins:
If you're dealing with many iOS devices daily, It can be useful to disable automatic enabling of Wi-Fi coms with newly connected devices. Also useful is the Ignore Wi-Fi connections option, which lets you focus on USB connected devices even if you wish to retain Wi-Fi connection with others.
Here, you can change the location of iMazing's library, choose wether or not iMazing should cache downloaded IPSW packages, and whether or not iMazing should automatically assign and unassign app licenses when you are signed in to a Volume Purchasing account.
For a more detailed look at what preferences are available, head to our iMazing Preferences article.