iPad 1:1 Deployment Guide

Download your organization's CA certificate from the KyberGate dashboard (Settings → Proxy → Download CA Cert) or directly from proxy.kybergate.com/api/ca.pem. This certificate allows KyberGate to inspect HTTPS traffic.

In your MDM console, create a new configuration profile. Add the CA certificate as a trusted root certificate. This must be deployed before the proxy profile to avoid certificate errors.

Create a second configuration profile with a Global HTTP Proxy payload. Set ProxyType to 'Auto' and set the PAC URL to: https://proxy.kybergate.com/api/pac/YOUR_ORG_ID?email=$EMAIL&udid=$UDID. Jamf will substitute the MDM variables automatically.

Assign both profiles to your iPad device group. Deploy in phases — start with a test group of 5-10 devices. Verify filtering is working by visiting a known blocked domain (e.g., tiktok.com).

Log into dashboard.kybergate.com and check the Devices page. You should see your iPads appearing with status 'online'. Each device will show its UDID, model, OS version, and current user.

Go to Policy Manager and apply appropriate filtering policies. Use the built-in templates (Elementary, Middle, High) or create custom policies. Set up schedule-based rules if needed.