Enrolling Apple devices using Automated Device Enrollment (ADE)

Enrollment is the process of onboarding your devices to Miradore MDM for remote management.

This article explains how you can use Apple's Automated Device Enrollment (previously Apple DEP) to automate the MDM enrollment of Apple devices that are associated with your Apple Business or Apple School Manager account.

If you are looking for a way to enroll devices that are not associated with your organization's Apple Business or Apple School Manager account, please read the following articles:

• Manual MDM profile enrollment for iPhone and iPad devices
• Manual MDM profile enrollment for Mac devices

Preparations

Before you try to enroll Apple devices using ADE, ensure that the following prerequisites are met:

• The devices are new or have been reset to factory settings and an enrollment profile has been assigned to them.
• Make sure you understand what is Apple Business or Apple School Manager and that your organization has an Apple Business or Apple School Manager account.
• Study the concept of Automated Device Enrollment (ADE)
• Check that you have Connected your Miradore site with ADE
• You must have an Administrator or Device Enrollment Manager role in Apple Business or Apple School Manager in order to manage device enrollment settings.

Overview of the Automated Device Enrollment process

First, after your organization purchases new Apple devices, the devices must be assigned to an MDM server for remote management in Apple Business or Apple School Manager. You can assign devices to MDM servers either manually or automatically. Both methods are explained later in this article.

The devices will then appear on the Enrollment > Apple ADE page on the Miradore site where you assigned them. If you cannot see any devices on the page, please use the green Update device list button to synchronize the device data from Apple Business or Apple School Manager to Miradore.

The Enrollment status column shows you whether the device has yet been enrolled in Miradore MDM.

In order to enroll the devices in Miradore, you must assign an enrollment profile to the devices. The enrollment profile contains the settings that will be applied to the devices during the enrollment.

The enrollment profile also defines whether the device user is allowed the detach the device from the remote management and whether the device is managed in the Supervised mode or not.

On the Enrollment > Apple ADE page, you can create new enrollment profiles, modify the existing ones, and assign the enrollment profiles to the devices. In the enrollment profile settings, you can make MDM enrollment mandatory, which means that the device user cannot bypass MDM enrollment in the device's Setup Assistant.

Follow the steps in the new or factory reset device's Setup Assistant. On the Remote Management screen, select one of the following options, depending on your device platform:

• On Mac, select Enroll.
• On iPhone, select Enroll this iPhone.
• On iPad, select Enroll this iPad.

The device enrollment is complete when the device's Enrollment status is Enrolled on the Enrollment > Apple ADE page in Miradore.

Please note that if you change the configuration of an existing Enrollment profile, the changes will not take effect on devices until they are factory reset and activated again.

How to assign devices to an MDM server (Miradore) manually?

Your organization's Apple Business or Apple School Manager account contains records of all Apple devices managed owned or managed by the organization. If you cannot find some devices from your Apple Business or Apple School Manager account, check How can I add devices to Apple Business or Apple School Manager.

By default, devices are not assigned to any MDM server in Apple Business or Apple School Manager. If you want to start managing your devices remotely with MDM software, you must assign the devices to an MDM server.

You can assign devices to MDM servers based on the order number or source. For example, you can assign all devices purchased from a certain reseller to one MDM server. To assign, unassign, or reassign devices, go to the Devices page in Apple Business or Apple School Manager and select Inventory. Use the search tools to filter devices, select the desired devices from the list, and then select Assign Device Management > Assign to choose the MDM server.

For more details, please refer to the Apple Business User Guide.

Setting a default MDM server for device types

You can avoid the need to manually assign devices by setting a default MDM server for specific device types. To do this, go to Devices > Management Services in Apple Business or Apple School Manager, and select Default Device Assignment, then choose the preferred MDM server for each device type. After this, new devices will be automatically assigned to that MDM server for remote management when they appear in Apple Business or Apple School Manager.

For more details, please refer to the Apple Business User Guide.