Integrate Apple’s Automated Device Enrollment with Miradore

To use Apple's Automated Device Enrollment program to enroll your devices in Miradore, you must first connect your Apple Business or Apple School Manager account with Miradore.

For general information on Automated Device Enrollment, see our dedicated article.

About Automated Device Enrollment

Automated Device Enrollment controls how your organization's Apple devices behave when users turn them on for the first time after unboxing or after a factory reset. For example, you can select which steps the devices' iOS Setup Assistant presents to the device users. During the setup process, the devices connect to the MDM solution and get automatically configured according to your preferences.

Thanks to this automated process, there's no need for IT to physically handle the devices.

Requirements

The following requirements must be met to use Apple Automated Device Enrollment with Miradore:

• Your organization must be enrolled in Apple Business or Apple School Manager.
• The Apple Business or Apple School Manager account used to create and manage the MDM server token must have a Device Enrollment Manager role in the default organization. A Device Enrollment Manager role scoped to a specific organizational unit only may not have sufficient access.
• Your Apple devices must be purchased from a vendor that can add the devices to your Apple Business or Apple School Manager account. Otherwise, you must manually add the devices to your account using Apple Configurator.

Connect Apple Automated Device Enrollment with Miradore

Watch our tutorial video or follow the steps below to connect Automated Device Enrollment with your Miradore site.

1. In Miradore, navigate to System > Infrastructure diagram.
2. Hover over the Apple Automated Device Enrollment icon and select Configure.
   
   Result: The Configure Apple Automated Device Enrollment wizard opens.
3. Select Download certificate to download the dep-public-key.pem file, then select Next.
4. Sign in to Apple Business or Apple School Manager. You can select Sign-in to Apple Business to open the Apple Business login page.
   Important: Do not close Miradore because you will have to navigate back to the Configure Apple Automated Device Enrollment wizard after creating the server token in Apple Business or Apple School Manager.
   
   Note: The instructions that follow cover configuration in Apple Business only. Apple School Manager is not covered in these steps.
5. In Apple Business, select Devices in the top navigation bar and select Management on the left sidebar.
6. At the top of the Device Management Services list, select Add to the right of Add device management service.
7. Enter a name for your device management service (for example, your Miradore site name), upload the dep-public-key.pem file, then select Next at the bottom of the page.
8. Select Download Service Token to download the server authentication token file (*.p7m), then select Done at the bottom of the page.
9. Navigate back to Miradore and select Next on step 2 of the Configure Apple Automated Device Enrollment wizard.
   Note: If you previously closed Miradore or the site timed out, follow steps 1–3 above.
10. Select Upload server tokens to upload the P7M file to Miradore.
    Note: The token is valid for one year. To learn how to renew your Automated Device Enrollment token, see Renewing an expiring Apple Automated Device Enrollment token.
11. Select Configure to finish setting up Automated Device Enrollment for your Miradore site.
    Result: You are redirected to an automatically created default enrollment profile on the now available Enrollment > Apple ADE page. After configuring the default enrollment profile's settings and saving the profile, it is ready to be applied to your Apple devices after syncing them with Miradore through Apple Business or Apple School Manager. You can also create additional enrollment profiles on the Apple ADE page. For more details on enrollment profiles, see Enrollment profiles for Apple's Automated Device Enrollment.

Results: Automated Device Enrollment is configured for your Miradore site and can be used to enroll your Apple devices. The Apple ADE page appears under the Enrollment menu.