MobileIron Cloud Help

Admin > Device Enrollment Program

Apple's Device Enrollment Program (DEP) enables customers to purchase devices in bulk and automatically and automatically enroll these devices in MDM during activation. If you choose to participate, you can use MobileIron Cloud as the MDM server for managing these devices.

For more information about DEP, see:

http://www.apple.com/education/it/dep/

Visit deploy.apple.com

Before you can use MobileIron Cloud with DEP, you need to sign up with Apple at deploy.apple.com.

Connect MobileIron Cloud to DEP

  1. Go to Admin > Device Enrollment Program.
  2. Click Download Key.
  3. Save your MobileIron Cloud key.
  4. Click deploy.apple.com.
  5. Sign in using your DEP-eligible Apple credentials.
  6. On Apple's DEP site:

a. Click Get Started.

b. Select the trusted phone to use for authenticating to Apple's service.

c. Enter the verification code sent to the selected phone.

d. Click Add MDM Server.

e. Enter a name to identify the virtual MDM server to be used with the service.

f. Click Next.

g. Upload the public key you downloaded earlier.

h. Click Next

i. Click Your Server Token to download the token.

j. Click Done.

  1. In MobileIron Cloud, click Upload.
  1. Click Next.
  2. Select an authentication option:
    • Prompt user to login with their corporate username and password during device activation.
    • Skip user login. (Assign all devices to the specified user.)

The selected option overrides selections under User Settings.

  1. Click Upload to install the key you received in step 3.
  2. Complete the displayed form to define the profile for your DEP devices:

Setting

What To Do

Name

Enter a name that identifies this DEP profile.

Department

Enter the department in your organization that is associated with this profile.

Supervised Mode

Indicate whether you will be deploying devices in supervised mode (using Apple Configurator).

MDM Removable

Indicate whether the device user should be able to remove the MDM profile.

MDM Mandatory

Indicate whether MDM should be mandatory.

Support Phone Number

Provide a phone number that device users can contact for help.

Skip entering passcode

Select to allow users to skip this portion of the standard device activation process.

Skip location services

Select to allow users to skip this portion of the standard device activation process.

Skip restore from backup

Select to allow users to skip this portion of the standard device activation process.

Skip Terms of Service

Select to allow users to skip this portion of the standard device activation process.

Skip signing in to AppleID and iCloud

Select to allow users to skip this portion of the standard device activation process.

Skip Siri

Select to allow users to skip this portion of the standard device activation process.

Skip automatically sending diagnostic information

Select to allow users to skip this portion of the standard device activation process.

 

MobileIron Cloud displays the DEP profile separately from the configurations. Do not go to the Configurations screen to view or edit the DEP profile.

  1. Click Save.

Note: It might take up to 15 minutes to synchronize profile changes after a device is enrolled via Apple's Device Enrollment Program (DEP).

 

To edit the DEP profile

  1. Go to Admin > Device Enrollment Program.
  2. Find the name of the server you created on the Apple site.
  3. Select Actions > Edit DEP Profile.

 

Note: If you refresh the server token on Apple's site, then the existing token will become invalid. However, the display in the Device Enrollment Program page, including the token expiration date, will remain until you upload the new token.

 

To edit the DEP authentication setting

  1. Go to Admin > Device Enrollment Program.
  2. Find the name of the server you created on the Apple site.
  3. Select Actions > Edit Authentication.