Category Filter

Enrollment of Apple devices through DEP

The Device Enrollment Program (DEP) is a legacy deployment program by Apple. Apple has combined DEP and VPP (Volume Purchase Program) to a single portal known as Apple Business Manager (ABM). Apple also has Apple School Manager (ASM) to manage devices in an educational institution. An organization must upgrade to ABM or ASM to continue using the DEP program. It can be upgraded to ABM by using its existing Apple Deployment Programs Agent account to log in to business.apple.com and then following the on-screen instructions.

ABM helps in deploying devices in bulk by automatically applying settings and configurations upon the initial device start-up, making it ready for use right out of the box. Over-the-air supervision of iOS devices is possible only if these devices are enrolled in ABM. ABM provides a unified interface to enroll and supervise enterprise-owned Apple devices. ABM requires an MDM solution to supervise it remotely.

Notes:

Configuring DEP with Hexnode

  1. Log in to your Hexnode portal.
  2. Go to Enroll > Platform – Specific > iOS/macOS/tvOS >Apple Business/School Manager.
  3. Note:

    • You can also configure DEP with Hexnode from Admin > Apple Business/School Manager > Apple DEP.

  4. Click Next.
  5. Enter a name for the DEP account and download the certificate file.
  6. Go to Apple Business Manager and sign in to your account.
  7. Navigate to Settings > Device Management Settings.
  8. Click Add MDM Server.
  9. Provide an MDM Server Name and upload the Certificate file you downloaded in Step 4.
  10. Click on Save and then click Download Token to download a new server token. After downloading the token, you’ll need to upload it to the Hexnode server.
  11. Go back to the MDM DEP settings page and upload the token you have just downloaded. Then, configure the below options:
    • Add as Pre-approved device: Enable this option to add the DEP devices as pre-approved devices.
    • Default Configuration Profile: Select an already created DEP profile, or you can also create a new DEP configuration profile.
      Note:

      • To view or edit any created DEP configuration profiles, either go to Enroll > Platform–Specific > iOS/macOS/tvOS >Apple Business/School Manager > DEP Configuration Profiles or Admin > Apple Business/School Manager > Apple DEP > DEP Configuration Profiles.

    • User authentication: Choose the type of user authentication required. You will have the following options to choose from:
      • Use global authentication settings: When this option is selected, the authentication mode as selected under Enroll > Settings > Authentication Modes is considered.
      • No authentication: When selected, the admin must choose the Domain and Default user to assign a default user for the devices.
  12.  

     

Assign devices to the Hexnode server

Perform the following steps to assign the DEP devices to the MDM server:

  1. Log in to your Apple Business Manager account.
  2. Click Devices. Search and select the required devices from the list. You can filter devices based on their source, order numbers, device types, etc. Then, click on the database icon.
  3. Next, click the Choose device management option and select the MDM server to assign the devices to that server.
Note:

  • You can also set Hexnode as the default MDM server in ABM to automatically assign newly purchased devices to it. To set Hexnode as the default MDM server on ABM, go to Settings > Device Management Settings > Default device assignment.

 

 

Once you’ve assigned devices, you can view several device assignments details in ABM such as serial numbers, order numbers, date of assignment, name of the MDM server, the total number of devices, and so on. On your Hexnode MDM portal, the assigned devices will be listed under Enroll > All Enrollments > No-Touch > Apple Business/School Manager > DEP Devices. If the devices do not appear here, click Sync with DEP to sync with Apple Business Manager.

 

Troubleshooting Tips