Secure device configuration profiles

A non-transitory computer readable storage medium configured to store instructions that, when executed by a processor included in a device, cause the device to carry out steps that include:

• receiving a first configuration profile from one or more data processing systems, the first configuration profile comprising:
• (i) a first configuration,
• (ii) a first certificate to authenticate the first configuration profile, and
• (iii) a second certificate to authenticate a second configuration profile;
• verifying, based on the first certificate, that the first configuration profile is authentic;
• receiving a user input that indicates an acceptance of the first configuration profile;
• in response to the user input, configuring the device according to the first configuration;
• and
• when the second configuration profile is received:
• verifying, based on the second certificate, that the second configuration profile is authentic, and
• automatically configuring the device according to a second configuration set forth by the second configuration profile, wherein the second configuration profile modifies at least one element of the first configuration.

A system configured to securely configure a device, the system comprising:

• one or more data processing systems;
• and
• a device, comprising:
• a processor;
• and
• a memory configured to store instructions that, when executed by the processor, cause the device to carry out steps that include:
• receiving a first configuration profile from the one or more data processing systems, the first configuration profile comprising:
• (i) a first configuration,
• (ii) a first certificate to authenticate the first configuration profile, and
• (iii) a second certificate to authenticate a second configuration profile;
• verifying, based on the first certificate, that the first configuration profile is authentic;
• receiving a user input that indicates an acceptance of the first configuration profile;
• in response to the user input, configuring the device according to the first configuration;
• and
• when the second configuration profile is received:
• verifying, based on the second certificate, that the second configuration profile is authentic, and
• automatically configuring the device according to a second configuration set forth by the second configuration profile, wherein the second configuration modifies at least one element of the first configuration.