Apple Business Manager - Device Enrollment

Rajesh Daadi Updated by Rajesh Daadi

The following steps outline how to enroll corporate-owned devices using Apple Business Manager (formerly known as DEP). Apple has merged the DEP portal and VPP portal into a unified platform known as Apple Business Manager. With Apple Business Manager, MDM administrators can enroll devices silently and deploy apps to devices seamlessly.

Steps:

  1. Signup or login at https://business.apple.com
apple-business-manager-login

 

  1. Add MDM Server
  • Enter the MDM Server name below.
  • Upload following public key for Codeproof. Public key is here.

  1. MDM Server Assignment

Enter Customer Number or Reseller Number: Enter the Reseller number or Apple Customer number to assign devices to an MDM server. If you are purchasing devices through resellers such as T-Mobile, Sprint, Verizon, AT&T..etc, please enter their reseller id and customer number below in the Device Management Settings.

For example, T-Mobile ABM reseller id is 13913520

  1. Download Server token (DEP token)
  1. Import the token in the MDM Console
  • Login to Codeproof Cloud Console
  • Go to "Enroll" menu from the top
  • Then select "ABM/ASM/DEP Setup"
  • Click on Add Server Token
  1. Assigning MDM Profile to devices
  • Click on "Manage" button to see all the devices by serial numbers.
  • Select all the devices using right side checkbox and click on "Install MDM" button.
  • Select "Enable Mandatory MDM" then "select Group" and click on "Assign Devices". See below image illustrations.

 

manage-button
assign-devices-in-mdm

 

  1. Final step is to kick start the enrollment in the iPhone or iPad

If the device is already in use, you must erase it to start the enrollment.

  • Open the settings App then go to "General". Then go to "Reset" and then select "Erase Settings and Content" to erase the device.
  • After the device restarts, the setup Welcome wizard will appear.
  • Skip "password" and continue with the MDM enrollment.
  • After the enrollment, device entry will appear in the Codeproof Console "Policy Manager" section by serial number. See below.

 

For more about the Apple Business Manager click here.

 

Consumer purchased Apple Devices: 

The consumer purchased iOS devices(not through DEP) can be enrolled into DEP and lockdown with MDM. This is available since iOS 11. This requires a physical access to device though. Using the latest Apple Configurator tool (a free tool from Apple) on a MAC computer and connecting the devices to MAC computer via USB. Instructions are here.

 

 

 

 

How did we do?

macOS Device Enrollment

ABM Bulk App Deployment

Contact