Category Filter

How to enroll Mac devices

Before enrolling a Mac device, please make sure that you have configured the APNs certificate in your server.
Device Management allows you to stay on top of your devices. With Hexnode you can restrict, secure and manage your macOS devices. To establish a connection between the device and the MDM first you would have to enroll your devices.

Hexnode MDM provides a wide range of methods to enroll your macOS devices. You can use these methods based on various criteria like number of devices, security, etc.

Note:

Hexnode supports devices with macOS version 10.7 and later.

  1. Open Enrollment
  2. Authenticated Enrollment
  3. DEP enrollment
  4. G Suite Enrollment for Mac.
Notes:

  • Make sure that you’ve enabled Parental Controls for your device. You can do it manually from your Mac.
  • Go to System Preferences > Users & Groups > Check Enable parental controls option > Click the lock to prevent further changes.

Enrollment without authentication

Users will be able to enroll their device without any enrollment credentials.
In Hexnode MDM Portal:

  1. Navigate to Enroll → Platform Specific → macOS → Email or SMS
  2. Switch to Open Enrollment.
  3. Select a Default User.
  4. Change the Ownership based on the enrolling device to either Personal or Corporate.
  5. Click Next.


In the device:

  1. Open Safari browser.
  2. Enter the enrollment URL.
  3. Click Enroll. The MDM profile gets downloaded.
  4. To install the MDM profiles click Continue and click Install.
  5. Enter the Mac administrator’s username and password.

Email/SMS enrollment

User can enroll their devices with the enrollment credentials send via enrollment mail. The mail contains username and password for enrollment.
In Hexnode Portal:

  1. Navigate to Enroll → Platform Specific → macOS → Email or SMS.
  2. Click on Switch to Authenticated Enrollment → Authenticated Enrollment.
  3. Select the types of users to be enrolled either via Enrollment Request.
  4. Change the Ownership to Personal, Corporate, let the user choose or Choose it later.
  5. Click Next.
  6. A message “Enrollment settings successfully updated” will be displayed.
  7. Check the box corresponding to Email or SMS based on how you want to send the enrollment request.
  8. Change the Domain and select the User.
  9. Click on Send.


In the device:

  1. Open Safari browser.
  2. Enter the enrollment URL.
  3. Click Enroll.
  4. Enter the username and password received in the enrollment request mail.
  5. Click Authenticate The MDM profile gets downloaded.
  6. To install the MDM profiles click Continue and click Install.
  7. Enter the Mac administrator’s username and password.


 
The profiles will install and the device will get enrolled in Hexnode MDM

Self enrollment

Self-enrollment allows the users to enroll devices with their Active Directory/Azure Active Directory/Google/Okta user credentials. For other users, the admin can create a default user and a dedicated password manually or assign a common password. Hexnode also provides the privilege to set individual passwords for the users and sends it to them as a bulk mail.The admin will have to provide only the enrollment URL to the users.
In the Hexnode Portal:

  1. Go to Enroll → Platform Specific → macOS → Email or SMS.
  2. Click on Switch to Authenticated Enrollment → Authenticated Enrollment.
  3. Select the types of users to be enrolled either via Self Enrollment.
  4. Change the Ownership to Personal, Corporate, let the user choose or Choose it later.
  5. Click Next.
  6. A message “Enrollment settings successfully updated” will be displayed.


In the device:

  1. Open Safari browser.
  2. Enter the enrollment URL.
  3. Click Enroll.
  4. Select the domain.
  5. Enter the username and password.
  6. Click Authenticate.
  7. To install the MDM profiles click Continue and click Install.
  8. Enter the Mac administrator’s username and password.