tvOS has no Safari and no Files app, so a .mobileconfig can't be opened directly on the device. Instead, Apple TV downloads profiles from a URL through a hidden menu. The steps below work for any profile — including the proxy profiles ProxyBeam generates.
Apple TV can only fetch profiles from a link — there is no way to open a local file. Put the .mobileconfig on any server the device can reach. If it's a debugging-proxy profile, ProxyBeam generates it and hosts it on your Mac automatically — the link is copied to your clipboard.
On the Apple TV, go to Settings → General → Privacy & Security. Highlight Share Apple TV Analytics — but don't click it. Press Play/Pause on the remote — a menu with Add Profile appears.
Choose Add Profile, enter the link and confirm the installation.
Go to Settings → General → About → Certificate Trust and enable trust for the installed certificate. Proxy profiles need this step — without it, HTTPS traffic can't be decrypted.
Installed profiles live in Settings → General → VPN & Device Management. Keep one proxy profile at a time and delete it when you're done.
On iOS you can set a proxy right in the Wi-Fi settings. tvOS has no such setting — on an unmanaged Apple TV the way to do it is a configuration profile that sets the proxy and adds the root certificate to trusted ones. ProxyBeam generates that profile for you.
In Charles Proxy on your Mac, choose Help → SSL Proxying → Save Charles Root Certificate… and save the certificate in the .cer format.
Open ProxyBeam and drag the saved .cer file into the window (or click Choose File…). The app starts a local server and shows a link like http://192.168.x.x:PORT/proxy.mobileconfig. Click the link — it's copied to your clipboard.
On the Apple TV, open Settings → General → Privacy & Security. Highlight Share Apple TV Analytics — but don't click it. Press Play/Pause on the remote — a profile menu opens. Enter the link from step 2 and press Play/Pause to confirm.
Go to Settings → General → About → Certificate Trust and enable trust for Charles Proxy CA.
Charles Proxy must be running on the Mac and listening for connections — the default port is 8888. The Mac and the Apple TV must be on the same Wi-Fi network.
On iOS you can set a proxy right in the Wi-Fi settings. tvOS has no such setting — on an unmanaged Apple TV the way to do it is a configuration profile that sets the proxy and adds the root certificate to trusted ones. ProxyBeam generates that profile for you.
In Proxyman on your Mac, choose Certificate → Export → Root Certificate as .cer… and save the certificate in the .cer format.
Open ProxyBeam and drag the saved .cer file into the window (or click Choose File…). The app starts a local server and shows a link like http://192.168.x.x:PORT/proxy.mobileconfig. Click the link — it's copied to your clipboard.
On the Apple TV, open Settings → General → Privacy & Security. Highlight Share Apple TV Analytics — but don't click it. Press Play/Pause on the remote — a profile menu opens. Enter the link from step 2 and press Play/Pause to confirm.
Go to Settings → General → About → Certificate Trust and enable trust for Proxyman CA.
Proxyman must be running on the Mac and listening for connections — the default port is 9090. The Mac and the Apple TV must be on the same Wi-Fi network.