Device Management MDM

Apple Device Enrollment Program (DEP)

In this article, you will learn about the Apple Device Enrollment Program (DEP) and how it’s supported in Applivery to streamline and automate Apple device enrollment.

Apple Device Enrollment Program (also known as DEP) is a tool integrated into Apple Business Manager that allows organizations to fully automate the enrollment process of Apple Devices in MDM solutions like Applivery. In the beginning, it was focused on new devices but starting with iOS 11, now it supports enrolling already purchased devices as well. DEP helps organizations enable supervision, MDM enrollment, skip setup steps beside many other features. 

How to configure Apple Device Enrollment Program (DEP) in Applivery #

Applivery provides seamless integration with the Apple Volume Purchase Program (VPP) for purchasing app and book licenses and installing company-private apps to manage Apple devices running iOS and macOS.

In this article, you will learn how to configure the Apple Device Enrollment Program (DEP) in Applivery. There are some pre-requisites that you must take into consideration:

  1. You already own an Apple Business Manager-approved account for your organization.
  2. You have an active Applivery Apple Device Management license.

 

If that’s the case, the next steps are:

  1. Configure a new MDM Server in Apple Business Manager (read the steps below).
  2. Create a DEP Profile.
  3. Sync Applivery with Apple Business Manager.
  4. Assign DEP profiles to new devices.
  5. Initialize the device.
 
Let’s get started:

Step 1 - Configure a new MDM server in Apple Business Manager #

Step 1.1 - Get your Public Key Certificate #

Sign in to the Applivery Dashboard and navigate to Device Management > Configuration > Apple > DEP.Then click the Download Publick Key button.

A file called Applivery DEP PublicKey (ORG NAME).cer will be downloaded.

Step 1.2 - Create a new MDM Server in Apple Business Manager #

  1. Sign in to Apple Business Manager as a user who has the role of Administrator or Content Manager.
  2. Click your name at the bottom of the sidebar, click Preferences (1), then click MDM server (2).
  3. At the top, click Add MDM Server (3).
abm-dep-add-mdm-server

Name the new MDM Server (1) and click Choose File… (2) under MDM Server Settings, then select and upload the .cer file you downloaded from Step 1.

Then click Save (3).

abm-dep-configure-mdm-server

The new MDM server will be created in Apple Business Manager and you will be redirected to the details screen. At the top, click Download Token.

A .p7m file will be downloaded.

abm-dep-download-token
Now get back to the Applivery Dashboard and scroll down until step 5 of the setup process.Click the Select button and upload the .p7m file you downloaded from ABM in the previous step.Then click Finish configuration.
applivery-dep-setup-step5

Step 2 - Create a DEP Profile #

DEP profiles define how new devices will be enrolled in Applivery MDM and the initial configuration of those Apple devices. They allow you to configure setup screens, multi-user, or supervision mode besides other features.Let’s get started!From the Applivery Dashboard, navigate to Device Management > Configuration > Apple > DEP.Next, click on DEP profiles.
dep-profiles

A modal view will open, providing you with the following options:

  1. View all existing DEP profiles.
  2. Create a new DEP profile.
Then click the + Create DEP Profile button.As you create the profile, you can assign it a Name (1) for future reference and select the desired enrollment options (2).
create-dep-profile-1
Optionally, you can also specify additional information (3) for the profile such as the Department, support contact information, language, or region.
create-dep-profile-2
Last, you can select the setup steps you want to skip (4) during device provisioning.by default, all of them will be unselected so that the standard setup process is displayed. Once ready click the Save button to finish.
create-dep-profile-3

The new DEP profile will be added to the list and will be ready to be assigned to new devices.

Step 3 - Sync with Apple Business Manager #

Now that your Applivery account and Apple Business Manager (ABM) account are connected, you can Sync them to retrieve all the new devices that have been added to ABM and configure them.

Just click the Sync with ABM button to start the syncing process and get the very last updates from Apple Business Manager.

New devices will be added to the list below.

Note

Note that the Sync with ABM button has been placed here to allow you to manually trigger a syncing process with ABM but this is a process that will be triggered automatically every hour on your behalf.

sync-with-abm

Step 4 - Assign DEP Profiles to new devices #

Now that new devices are properly synced with Applivery, you can start assigning DEP profiles to those devices so that they can finally get enrolled into Applivery. Follow these steps:
  1. Under the list of devices, just click on the device (1). A side view will be opened.
  2. Use the dropdown (2) menu to choose a DEP profile. The details will be displayed for your confirmation.
  3. Click the Assign (3) button.
assign-dep-profile

Once assigned, the device will go through the following statuses:

  • Assigned: the enrollment profile has been assigned to the device but not applied to the actual device yet.
  • Pushed: the enrollment profile has been correctly applied to the device
 
Take them into consideration before moving to the next step since this is an asynchronous process that may take a few minutes depending on Apple’s API.

Step 5 - Initialize device #

Now that your devices have been associated with an Enrollment profile in Applivery, it’s time to start them up:
  1. Turn on your device for the first time. The device may ask a few initial setup questions.
  2. Select a WiFi network that has internet access since it is required to complete the Apple DEP check-in process.
  3. Next, the device will get the DEP profile configuration and will follow the settings you created.
  4. Once the setup process is completed, the device will appear under Device Management > Devices section in the Applivery dashboard.
Note

Note that if the device was previously turned on and the setup process has been completed, you will need to factory reset the device. This is because the devices only check in with the Apple DEP service when they have not yet been set up.

To factory reset the device go to Settings > General > Reset and select Erase all content and settings.

Was this article helpful?

— talk to an expert —

Schedule a demo