Enrollment Using Apple Configurator
Apple Configurator allows IT admins to perform ADE Enrollment and enable automatic enrollment of iOS devices in a UEM solution. Auto configuration of iOS devices with desired profiles and apps before deploying them for the intended purpose makes iOS device management easy.
To enroll a device from Apple Configurator to SureMDM, follow these steps:
To enroll a device directly from Apple Configurator to SureMDM, make sure that the ADE Token Exchange is complete (refer to the steps here) and follow the below-mentioned process:
Note: If the devices are not through a ADE Reseller, you need Apple Configurator 2.0 to activate the supervised mode. This will enroll the devices in the 42Gears UEM as well.
1. Connect your iOS device to the configurator and double click on the device on the screen.
2. The device needs an active internet connection – either push a Wi-Fi profile using Apple Configurator or turn on the device and connect to Wi-Fi.
If the device is not connected to the internet, then the ADE enrollment will fail and you will get a Cloud Configuration Error.
3. Connect it to the configurator > click Prepare.
4. Select Manual Enrollment > select checkbox of the the first three options (except enable sharable iPad) and click Next.
5. On the next page, click Enroll in MDM > New Server and click Next.
6. In the below screen, provide the following information and click Next:
- Name - Name of the Server
- Host URL - https://*server name*/enroll?q=*dep,Account ID in base 64 encoded format*
Example: https://company.suremdm.io/enroll?q=ZGVwLDAzMTkwMDU1NA==
Note:
- Account ID will be the SureMDM Account ID to which the user wants to enroll the devices.
- Navigate to Settings in the top right corner in the SureMDM console to get the Account ID.
Note: The Account ID should be encoded in base 64 format. Only after encoding the ade,<Account_ID> value, it should be appended with host url.
8. Add Trust Anchor Certificate for the MDM Server in below screen and click Next.
9. Select New Organization and click Next.
Note: If you want to enroll in an existing organization, select the desired organization from the drop-down.
10. After clicking Next, you should provide your Apple Business Manager/ADE account and password, and then click Next.
11. Select Generate a new supervision identity and click Next.
12. Specify the Show All Steps option and click Next.
13. In the screen below, you can see that the profile is listed. Select it and click Next.
14. Skip the Username and Password section and click Prepare.
15. After clicking Prepare, you would be prompted with Apple configurator credentials. Enter the credentials and click Update Settings.
16. The device enrollment process is initiated.
During the device enrollment setup, the below screen will appear, in which Restore option should be clicked. This is because the device data is wiped during enrollment, and the prompt is for restoring the latest settings.
After the process is complete, the device gets listed in Apple Business.
17. The device should now be automatically enrolled in your SureMDM account once the process is complete.
When an IT Admin enrolls an iOS device which was not purchased under ADE Program directly from Apple Configurator to SureMDM, the device user will have the option to remove the ADE Profile under Settings for the first 30 days. Post the first 30 days, this option to remove the profile will be disabled.