How to create and deploy custom configuration profiles for Apple devices?

Custom configuration profiles are files having device configuration information inside them. Custom configuration profiles for Apple devices are normally created using the Apple Configurator 2.

In the Apple Configurator 2,

• Go to Files → New profile.
• A new window pops up, in that window, a profile name and a profile identifier have to be given.
• On the left-hand side of this new window, there are a lot of options which you can select. Each option gives you a set of device features that can be configured using the custom profile. For example, there is an option called Restrictions, and this option lets you restrict or allow device features like camera, microphone, etc.

After all the required device features are configured, the profile has to be signed and saved. To sign the profile a certificate is required.

• Go to File → Sign Profile and choose the signing identity in the pop-up window. Signing profiles lets devices know that the profile is safe to be installed.
• After signing the profile, go to File → Save and save the profile. The file has to be a .xml, .plist or .mobileconfig file to be deployed as a configuration profile. Apple Configurator 2 stores the profile as a .mobileconfig file by default.

Once the profile is created, it can be deployed in multiple ways: through Apple Configurator 2, as an email attachment, through a website, through Over-the-Air Profile Delivery and Configuration or over the air using a UEM. Configuration profiles deployed to devices will be available at the Profile section in Device Settings. These profiles can be made non-removable using Apple configurator 2.