Home Device Management Enrolling Devices via Mosyle

Enrolling Devices via Mosyle

Last updated on Apr 17, 2026

Enrolling Devices via Mosyle

Mosyle is a popular MDM solution for Apple devices in education. This guide walks you through configuring Mosyle to deploy KyberGate's web filtering to your iPads and Macs.

Before You Begin

  • Mosyle Business or Mosyle Manager account with admin access
  • Devices enrolled in Mosyle (supervised via Apple Business/School Manager)
  • KyberGate admin access to download enrollment assets
  • Estimated setup time: 15–20 minutes

Step 1: Download KyberGate Assets

  1. Log in to dashboard.kybergate.com
  2. Go to Devices → Enrollment → iPad (or macOS)
  3. Download the KyberGate CA Certificate (.cer file)
  4. Copy the PAC File URL

Step 2: Upload the CA Certificate

  1. Log in to your Mosyle dashboard
  2. Navigate to Management → Profiles
  3. Click Add new profile
  4. Select Certificate from the payload options
  5. Upload the KyberGate CA Certificate
  6. Name it "KyberGate CA Certificate"
  7. Under assignment, select your target device groups or all devices
  8. Save the profile

⚠️ Important: On iOS, you must also ensure the certificate is set to full trust. Mosyle handles this automatically for supervised devices when the certificate payload is configured correctly.

Step 3: Configure the HTTP Proxy

  1. In Mosyle, create another profile (or add to the existing one)
  2. Select the Global HTTP Proxy payload
  3. Configure:
    • Proxy Type: Automatic / PAC
    • PAC URL: Paste your KyberGate PAC file URL
    • Allow Direct Connection if PAC is Unavailable: No (recommended for security)
  4. Assign to the same device groups
  5. Save the profile

Step 4: Deploy and Verify

  1. Mosyle will push the profiles to devices on next check-in
  2. To force immediate deployment: Select target devices → Actions → Push Configuration
  3. On the device, verify:
    • Settings → General → VPN & Device Management → KyberGate profile should be installed
    • Settings → General → About → Certificate Trust Settings → KyberGate CA should be trusted
  4. Open Safari and browse to a blocked site — the KyberGate block page should appear
  5. Check the KyberGate dashboard — the device should appear under Devices

Step 5: Deploy KyberGate Agent for macOS (Optional)

For macOS devices, you can also deploy the KyberGate native agent:

  1. Download the KyberGate macOS agent (.pkg) from the dashboard
  2. In Mosyle, go to Management → Install macOS App
  3. Upload the .pkg file
  4. Configure:
    • Installation type: Required
    • Target devices: Select your Mac fleet
  5. The agent installs silently and configures proxy + CA certificate automatically

Troubleshooting

Profile fails to install:

  • Ensure the device is supervised — non-supervised devices reject Global HTTP Proxy profiles
  • Check Mosyle's Commands section for error logs
  • Verify the certificate file is valid (.cer format)

Certificate not trusted on the device:

  • For supervised iPads, trust is managed automatically via MDM
  • If using a non-supervised Mac, the user must manually trust the certificate in Keychain Access
  • Redeploy the profile and check Mosyle command status

Devices enrolling but no filtering:

  • Verify the PAC file URL is correct (test by loading it in a browser)
  • Check that Mosyle didn't strip any URL parameters from the PAC URL

Related Articles