# Enrollment of Apple devices through ADE **Automated Device Enrollment** (**ADE**), formerly known as the **Device Enrollment Program** (**DEP**), is Apple’s standard method for enrolling organization-owned devices into Mobile Device Management (MDM). ADE utilizes a “zero-touch” approach, allowing devices to automatically enroll in Hexnode UEM and apply configurations immediately upon their first power-on. This capability is managed through **Apple Business** or **Apple School Manager** (**ASM**), which integrate directly with Hexnode to streamline deployment. Key Concepts ------------- - **Apple Business**: A web-based portal combining ADE and VPP (Volume Purchase Program) to manage devices and apps in enterprise environments. - **Supervision**: Devices enrolled via Apple Business can be “Supervised” over-the-air, granting administrators higher privileges and control. - **Zero-Touch Deployment**: No manual configuration is required by IT; the user unboxes the device, connects to Wi-Fi, and the device configures itself. Prerequisites -------------- To use ADE, ensure the following requirements are met: - **Apple Business/ASM Account**: Your organization must be enrolled in Apple Business or Apple School Manager. - **APNs Certificate**: A valid Apple Push Notification service certificate must be configured in the Hexnode UEM portal. - **Supported Operating Systems**: - **iOS**: iOS 7 or later. - **iPadOS**: iPadOS 13.1 or later. - **macOS**: macOS 10.9 or later. - **tvOS**: tvOS 10.2 or later. - **visionOS**: visionOS 2.0 or later. Note: Devices running iOS 11 or later that were not purchased directly from Apple or an authorized reseller can be manually added to your ADE account using **Apple Configurator**. Step 1: Configure ADE in Hexnode --------------------------------- Establishing a connection between Hexnode and Apple’s portal is the first step. 1. Log in to your Hexnode UEM portal. 2. Either navigate to **Enroll > Platform-Specific > [iOS/macOS/tvOS/visionOS] > Apple Business/School Manager > Add ADE Account** or **Admin > Apple Business/School Manager > Automated Device Enrollment > Add ADE Account**. 3. Enter a name for the ADE account and click to download the certificate file. Step 2: Configure Apple Business --------------------------------- 1. Sign in to the [Apple Business](https://business.apple.com/) portal. 2. Navigate to **Devices > Management Services.** 3. Scroll down to the **Services** subtab and click **Add** next to **Add device management service.** 4. Enter the device management service name (e.g., Hexnode). This is a required field. 5. Optionally, check the box next to **Allow this service to release devices.** 6. Upload the **Certificate file** downloaded from Hexnode in the previous step. (Supported formats: PEM, DER). [![Configure Apple Business by adding MDM server](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Add-MDM-server-to-Apple-Business.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Add-MDM-server-to-Apple-Business.png "Add MDM server to Apple Business") 8. Click **Download Service Token** to download the server token to your device. [![Configure Apple Business by downloading server token](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Download-server-token-in-Apple-Business.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2018/08/Download-server-token-in-Apple-Business.png "Download server token in Apple Business") 10. Click **Done.** A confirmation notification will appear stating, *“The MDM server is now available as a device management service.”* Step 3: Upload Token to Hexnode -------------------------------- 1. Return to the **ADE settings page** in Hexnode UEM console. 2. Upload the **MDM Server Token** you just downloaded from Apple. 3. Configure the enrollment settings: - **Add as Pre-approved device**: Enable this to add the ADE devices as pre-approved devices. - **Default Configuration Profile**: Select an existing ADE enrollment profile or create a new one. 4. **Save** the configuration. Note: To view or edit [enrollment profiles](https://www.hexnode.com/mobile-device-management/help/dep-management/#enrollment-profile) later, either navigate to **Enroll > Platform-Specific > [iOS/macOS/tvOS/visionOS] > Apple Business/School Manager > Enrollment Profiles** or **Admin > Apple Business/School Manager > Automated Device Enrollment > Enrollment Profiles**. Step 4: Assign Devices to Hexnode Server ----------------------------------------- Devices purchased from Apple must be assigned to the specific MDM server within the Apple portal. 1. Log in to [Apple Business](https://business.apple.com/). 2. Navigate to **Devices > Inventory.** 3. Search for devices (Filter by **Device Management, Enforcement Deadline, Source, Order Number, Device Type,** or **Storage Size**) 4. Select the target devices from the list, click **Assign Device Management,** and choose the Hexnode server (created in Step 2) from the device management service dropdown. 5. Click **Continue.** Note: You can set Hexnode as the default server for all future purchases by going to **Settings > Device Management Settings > Default device assignment** in Apple Business. Step 5: Sync Devices with Hexnode ---------------------------------- 1. In the Hexnode portal, go to **Enroll > All Enrollments > No-Touch > Apple Business/School Manager > Devices**. 2. If new devices do not appear, click **Sync with ADE**. 3. **Full Sync**: To completely sync all the ADE-enrolled devices go to **Enroll > All Enrollments > No-Touch > Apple Business/School Manager > Devices.> Accounts and click Sync all ADE Accounts.** End-User Experience (Device Activation) ---------------------------------------- Once assigned and synced: 1. The user turns on the device. 2. The device connects to Wi-Fi. 3. The device contacts the Apple server, detects the assigned ADE profile, and prompts for **Remote Management**. 4. The Hexnode UEM profile installs automatically, and the device applies it to all pre-configured policies (Supervision, restrictions, etc.). Note: If a device is already activated, it must be **Reset** to trigger the ADE setup process again. Troubleshooting Common ADE Errors ---------------------------------- If the enrollment process does not initiate or complete with errors, check the following common issues derived from our support database. ### 1. “Profile Installation Failed” (On Device) **Symptom:** The iOS device fails to install the profile and displays the message “*Profile Installation Failed*”. **Cause**: This usually occurs when the device is not connected to the internet or when Stolen Device Protection is active. **Resolution:** - Check that the device is connected to a stable Wi-Fi network. If Wi-Fi is turned off, ensure cellular data is available. - Turn off the **Stolen Device Protection** option in **Settings** before starting enrollment. - Updating the device to the latest OS version can also help resolve the issue. ### Need more help? For a comprehensive list of error codes and advanced debugging steps, please refer to our detailed troubleshooting guides: - [Common errors while enrolling iOS devices in Hexnode UEM](https://www.hexnode.com/mobile-device-management/help/common-errors-while-enrolling-ios-devices-in-hexnode-mdm/). - [Common errors while enrolling in Apple Business Manager](https://www.hexnode.com/mobile-device-management/help/common-errors-while-enrolling-in-apple-business-manager/).