Connect an Apple TV

Install the proxy profile with Apple Configurator, verify trust on the TV, and repair missing traffic or HTTPS inspection.

Use this walkthrough to answer a playback question on an Apple TV you administer: when you switch audio tracks, does the player request the other rendition? You’ll need a supervised test Apple TV, the Mac that supervised it, Apple Configurator on that Mac, and a network connection from the TV to the proxy. If you don’t have that supervision identity, stop here; the guided profile installation requires it.

Install the profile from the supervising Mac

  1. Note the TV’s existing configuration so you can restore it. Start the proxy on the Mac and choose Guided Setup & Repair → Apple TV Setup Guide. In Export Profile, check the Mac’s IP address and listener port. The TV must be able to reach that address. JoesProxy writes both values into the profile.
  2. Choose Export Profile… and save the .mobileconfig file. In Apple Configurator, select the intended Apple TV and choose Add → Profiles. Select the file you just exported.
  3. On the TV, review the profile and select Install. The warning lists Unmanaged Root Certificate, Global HTTP Proxy and Unsigned Profile. Confirm only if this is the file you just exported for this test TV. Back on the Mac, select I Installed It. That button records what you did; it does not install the profile.

Enable trust on the TV for HTTPS inspection

Installing the profile adds the root certificate. To let JoesProxy inspect HTTPS for your test service, open Settings → General → About → Certificate Trust Settings on the TV. Select the expected JoesProxy Root CA, review the warning and choose Continue. Once the TV shows Trusted, select I Trusted It on the Mac. That confirmation does not change trust on the TV.

Verify a request from the player

In JoesProxy, select Watch for Traffic. Within 60 seconds, open your test app on the TV and play a known title. Choose View Session and match the device, host and time to that action. If the watch caught another client, choose Watch Again. Seeing the connection verifies routing for that request. To verify HTTPS inspection, check that inspection is enabled for your test host and look for the expected playlist contents in a fresh response.

Investigate a silent audio switch

Play a test title with two recognizable audio tracks. Note which one you hear, switch tracks once, then look at the timeline around that moment. If playlist details are visible, compare the requested audio rendition and its next segments with the track you selected.

Record two observations: what the player requested and what you heard. If the expected segments arrived but the TV stayed silent, delivery succeeded for those segments; decoding and audible playback are still open questions. Use the media guide to plan the next comparison.

Repair the part that failed

  • Configurator doesn’t offer the intended device: verify supervision on the original supervising Mac before changing certificates.
  • No traffic in 60 seconds: check the listener is running and that the TV can reach the IP address and port in the profile. If either value changed, export a fresh profile and replace the test profile through Configurator. Choose Try Again and repeat the same app action. If the settings match but no traffic flows after installation, the Mac guide suggests restarting the test TV.
  • The TV says Not Trusted: return to Certificate Trust Settings on the TV. Confirm trust for the expected test root there, not just in the Mac checklist.
  • The Mac reports a certificate problem: in Guided Setup & Repair, choose Repair Certificate… to open certificate setup. If the repair replaces the root, choose Export Apple TV Profile…, install the current profile through Configurator, and verify the new root’s trust on the TV before retrying. A Mac repair cannot remove an old unmanaged profile from the TV. Remove only an obsolete test profile you administer; leave organization-managed profiles to their administrator.
  • Connections appear, but no response body: open Troubleshoot missing HTTPS bodies or pinned traffic in the Apple TV guide. Check whether the request was tunneled rather than inspected before replacing any certificate.
  • One app appears; another doesn’t: repeat a known network action in the second app. Some clients use another route or reject the inspection certificate. Do not weaken the app’s trust checks to force a result.

Return the TV to ordinary playback

Remove the temporary profile through the supervising Mac’s device-management workflow. Reset in the JoesProxy guide only clears its checklist; it does not undo anything on the TV. Restore the previous configuration and remove test trust you introduced. Stop the test stream and proxy, then play the original title again. Confirm picture and sound with the proxy off.