brandonmcrae.combrandonmcrae.com/images/case studies/ibizaconsole... · apple enrollment android...

Day 0 – Apple School Manager setupASM enables multi-user support on iOS devices and class roster sync via SDS.

PM: Daniel Gerrity, UX Design: Brandon McRae, UX Research: Ryan Baker

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use

Enrollment Restrictions

Overview

MANAGE

MONITOR

Enrollment Health

Corporate Enrollment

Device Categories

Corporate Hardware Identifiers

Device Enrollment - Overview

Microsoft Azure | Menu ❯ Device Enrollment ❯ Enrollment Program Token Lesley ThomasCONTOSO

1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

APPLE CONFIGURATOR (AC)

Enrollment Program Profiles

Requires Enrollment Program Token

Enrollment Program Devices


AC Profiles

6Profiles with 100% device enrollment 2

Profiles with devices not yet enrolled 3

Profiles with no devices assigned 1

Apple MDM Push Certificate

365 Days Left

Active

Enrollment Program Token

Configure

Intune requires an Apple certificate to manage Apple devices and supports multiple enrollment methods. Learn more

AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

ENROLLMENT PROGRAM

Replace “DEP” with “Enrollment Program”

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete

Expiration:Not available

Days Until Expiration:Not available

Apple ID:Not available

Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

Apple enrollment programs help businesses and educational institutions easily deploy and configure iOS and macOS devices. Learn More

1. Download the Intune public key certificate required to create the token.

Steps to configure an enrollment program token

Apple token

Apple ID

3. Enter the Apple ID used to create your token.

Ù

Ù

Download your public key

4. Locate and upload your token. Intune will automatically synchronize with your enrollment program account.

To use Apple School Manager (ASM), use your key to download a token from the link below. Microsoft School Data Sync will be required for some ASM features. Learn MoreCreate a token via Apple School Manager

Create a token via Apple Device Enrollment Program

To use the Apple Device Enrollment Program (DEP), use your key to download a token from the link below.

2.

OR


Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID

3. Enter the Apple ID used to create your token. This ID can also be used to renew the token.

Ù

Ù


Upload





2.

OR


C:\Intune\IntuneKey.pem

Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


Delete Connect SDS

Browser session to remember that ASM link

was clicked.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete




Status:: Not set up

Apple offers cloud enrollment services to help businesses and education institutions to easily deploy and configure iOS and macOS devices. Learn More

Which enrollment program would you like to use?

Apple MDM Push Certificate Enrollment Program Token

Configure

365 Days Until Expiration

Active

CERTIFICATES FOR MANAGEMENT OF IOS AND MAC OS X DEVICES Learn More

ENROLLMENT PROGRAMLearn more

Apple Configurator Profiles

MANAGE APPLE CONFIGURATOR (AC) ENROLLMENT SETTINGS Learn more

Requires Apple DEP token

AC Devices

Enrolled 0

Ready to Enroll 0

Missing Profile 0

0AC Profiles

0

Fully Enrolled 0

Partially Enrolled 0

Not Assigned 0

Profiles Devices



Device Enrollment Program (DEP)

Apple School Manager (ASM)

1. Download the Intune public key certificate required to create an ASM token.

Steps:

2. Download an ASM token from the website below. Learn More.

Apple token

Apple ID


Ù

Ù

Create an ASM token via Apple School Manager


4. Browse to your ASM token to upload. Intune will automatically synchronize devices from your ASM account.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories


Upload Public Key into ASM

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories


Download token from ASM

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


[email protected]

Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


[email protected]

Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


[email protected]

0 Intune server_Token_2015-11-19T19_14_15Z_smime.P7m

Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES

ENROLLMENT PROGRAM






AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù


Upload





2.

OR


[email protected]


9:42 PM

Uploading…

Activity indication given…

Button disabled.

Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

SDS setup link is disabled until permission is granted

SDS setup section appears after token it active.

Upload complete. ASM is Active.

Upload complete. 9:42 PM

Token tile shows ‘Active’

Connect SDS

Expiration:4/15/2017

Days Until Expiration:365

Apple ID:[email protected]

Status:Active

Steps to renew the enrollment program token:The enrollment program token must be renewed annually. It can be renewed anytime.

1. Generate an updated token for your current enrollment program:

Apple token

Apple ID

2. Enter the Apple ID used to create your enrollment program token. This ID can be used to renew the token.

Ù

Ù

Download a DEP token via the DEP portal

Upload


Download an ASM token via the ASM portal

OR

The Classroom app requires Microsoft School Data Sync. Set up SDS now.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Sync complete. 9:42 PM

Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


9:42 PM

Syncing…

Delete button active.

If ASM link was clicked, session knows to pop SDS notification.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active


Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1


Delete




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


Connect SDS

Connect School Data Sync

OK

Enable Microsoft School Data Sync (SDS) for Apple School Manager

ASM supports syncing class roster data to Azure Active Directory using Microsoft School Data Sync (SDS). This sync is required to use the Classroom app. This step is only required for ASM and is not applicable to DEP. Learn More

Allow Microsoft School Data Sync to use this token

Set up Microsoft School Data Sync

AllowBlock

OK

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

OK

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

OK

Allow SDS to access your ASM account. After you allow access, you must set up SDS to sync data.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

OK

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

SDS setup link is enabled

OK

https://go.microsoft.com/fwlink/?linkid=844806->

https://sds.microsoft.com/SyncProfile/ConfigureSis?profiletype=3

Success.Successfully shared token with Microsoft School Data Sync

9:25 AM

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

OK

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

Set up School Data Sync

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories



1





Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR



OK





AllowBlock

Delete Connect SDS

OK

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR

Day 360 – Apple School Manager renewalToken expires every year.


Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete




Status:About to expire

Without a valid token, new devices cannot enroll.

Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



ORGenerate new token

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR

[email protected]

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR


9:42 PM

Uploading...


Button disabled.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0






55 Days Left

Active


Delete






Connect SDS



Apple token

Apple ID


Ù

Ù


Upload



OR


Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0





Delete

Steps to renew the enrollment program token:




Status:Active

The enrollment program token must be renewed annually, and can be renewed anytime.





Apple token

Apple ID


Ù

Ù


AllowBlock


[email protected]



55 Days Left

About to Expire


Upload

9:42 PM

Uploading...


Button disabled.

Delete



OR

Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

Upload complete. 9:42 PM

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





365 Days Left

Active






37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0

Upload complete. ASM is Active.




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


Connect SDS

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active


Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


9:42 PM

Syncing…

If ASM link was clicked, session knows to pop SDS notification.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active


Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR


Day 360 – Apple School Manager token deletionRequired to change ASM accounts or revert to legacy DEP


Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






5 Days Expired

Expired

Connect SDS


Days Until Expiration:-5


Status:Expired



Apple token

Apple ID


Ù

Ù


Upload



OR

The Apple DEP token has expired.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR

Are you sure you want to delete this token?You will need to reassign enrollment profiles and devices, but they will not be deleted. Learn

more

Yes No


5 Days Expired

Expired

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






365 Days Left

Active

Connect SDS




Status:Active



Apple token

Apple ID


Ù

Ù


Upload



OR

Are you sure you want to delete this token?You will need to reassign Apple School Manager enrollment profiles and device Devices, but

they will not be deleted. Learn more

Yes No


5 Days Expired

Expired

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health



Delete




Status:: Not set up

APPLE CERTIFICATES


AC Profiles





365 Days Left

Active


Configure


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0




Apple token

Apple ID


Ù

Ù






2.

OR


Return to Day 0 state

Leave Workflows accessible

ENROLLMENT PROGRAM


37,453Enrolled 37,450

Ready to Enroll 3

Missing Profile 0





Delete Connect SDS

Enrollment Program TokenApple Push Certificate Redirect Day 100

May 15, 2016 PM: Daniel Gerrity, UX Design: Vlad Carpenco, UX Research: Ryan Baker

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories


Microsoft Azure | Menu ❯ Device Enrollment ❯ Apple Enrollment Lesley ThomasCONTOSO

Apple Enrollment Device Enrollment

Apple MDM Push Certificate Apple DEP Token

Apple Configurator Devices

Apple DEP Profiles Apple DEP Devices


2 Expired

Expired

APPLE CERTIFICATES

APPLE DEVICE ENROLLMENT PROGRAM (DEP)

APPLE CONFIGURATOR


Requires Apple DEP tokenRequires Apple DEP token



Ready to Enroll 0

Enrolled 0

Without Profile 0

…

0Apple Configurator Profiles

0

Direct Enroll Active 0

Direct Enroll Inactive 0

5 Expired

Apple DEP Devices

Ready to Enroll 0

Enrolled 0

Without Profile 0

…

0Apple DEP Profiles

Assigned 0

Not Assigned 0

0

Expired

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories




1

Apple Enrollment

Windows Enrollment

Terms of Use


Device Categories

Overview

MANAGE

MONITOR

Enrollment Health




Delete

APPLE CERTIFICATES

ENROLLMENT PROGRAM



365 Days Left

Active


AC Devices

0Enrolled 0

Ready to Enroll 0

Missing Profile 0

AC Profiles





0Enrolled 0

Ready to Enroll 0

Missing Profile 0






5 Days Expired

Expired

Connect SDS


Days Until Expiration:-5


Status:Expired



Apple token

Apple ID


Ù

Ù


Upload



OR

The Apple DEP token has expired.


2 Expired

Expired

An Apple MDM Push certificate is required to manage Apple DEP devices. You have to create an Apple MDM Push certificate before setting up an Apple DEP Token. Go here to create it.

Apple Enrollment

Android Enrollment

Windows Enrollment

Terms of Use


Overview

MANAGE

MONITOR

Enrollment Health


Device Categories


Device Enrollment - Apple Enrollment

Complete Apple Push Certificate Setup

Microsoft Azure | Menu ❯ Device Enrollment ❯ Apple Enrollment ❯ Apple MDM Push Certificate Lesley ThomasCONTOSO



Apple DEP Profiles Apple DEP Devices


-2 Days Until Expiration

Expired

APPLE CERTIFICATES

APPLE DEVICE ENROLLMENT PROGRAM (DEP)

APPLE CONFIGURATOR


Requires Apple DEP tokenRequires Apple DEP token



Ready to Enroll 0

Enrolled 0

Without Profile 0

…

0Apple Configurator Profiles

0

Direct Enroll Active 0

Direct Enroll Inactive 0

-60 Days Until Expiration

Apple DEP Devices

Ready to Enroll 0

Enrolled 0

Without Profile 0

…

0Apple DEP Profiles

Assigned 0

Not Assigned 0

0

Expired


2 Expired

Expired

5 Expired

Expired

Enrollment Program ProfilesCreate Profile


Terms of Use


Device Categories

Corporate Device Identifiers

Corporate Device Profiles

Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors

Microsoft Azure | Menu ❯ Device Enrollment ❯ Apple Enrollment ❯ Enrollment Program Profiles ❯ Create Lesley ThomasCONTOSO

1

OverviewDevice Enrollment

Manage iOS devices pre-authorized for Apple Configurator enrollment.

Enrollment Program profiles define key configurations that must be set at enrollment time such as user affinity.

Apple Configurator


Default Enrollment Profile ready.

Enrollment Program Token ready.

Sync ready.


NAME DESCRIPTION USER AFFINITY SUPERVISED DEPARTMENT PLATFORM

No profiles created.

Export

Create

Filter

Search

You must assign enrollment program serial numbers to a profile. Profiles define configurations set during enrollment. Learn more

Create Enrollment Profile

Enrollment Program profiles define configurations that must be set during enrollment, such as user affinity. Learn More

Name this prolife

NameÙ

Optional

Description

Device Management Settings Configure Settings

Setup Assistant CustomizationConfigure Settings

Enroll with user affinity

User Affinity

None

Device Category

Ù

Ù

Create

Shared iPad Mode will be disabled if devices are enrolled with user affinity

Default value. Majority case.

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter

Search




Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Create


Device Management Settings

Supervised

Management Mode:

Locked Enrollment

OK

NoYes

Off On

Allow Pairing:

Deny all

Apple Configurator Certificates:

Select certificate file to upload

UPLOADED CERTIFICATES

apple_config_certif013.cer

Trust Anchor Certificates:



apple_trust_certif021.cer

Shared iPad controls not shown based on user

affinity setting.

Info notification on impact of setting shown.

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter

Search




Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Create


Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create

P1

User affinity associates devices with users. This is required for mobile application management and conditional access to company data.

Choose a Device Category tag to apply during enrollment (optional).Shared iPad Mode will be disabled if

devices are enrolled with user affinity

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create


Enroll with User Affinity

Enroll without User Affinity

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description



Enroll without user affinity

User Affinity

None

Device Category

Ù

Ù

Search


Create

Notification disappears with user affinity set to “Enroll

without user affinity.”

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create


OK

Allow Pairing:

Deny all







Supervised

Management Mode:

Locked Enrollment

Ù Enable Shared iPad:

Not configured

NoYes

NoYes

Supervised Mode = ‘Yes’ enables child settings.

‘Not configured’ by default. Required setting. User must

make a choice from dropdown.

Maximum Cached Users

10

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create


OK

Allow Pairing:

Deny all







Supervised

Management Mode:

Locked Enrollment


NoYes

NoYes


10

YesNo

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create


OK

Allow Pairing:

Deny all







Supervised

Management Mode:

Locked Enrollment

Maximum Cached Users10

NoYes

NoYes

Yes


Enabling Shared iPad also enables Max Users setting.

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




Export

Create

Filter



Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Search


Create


OK

Allow Pairing:

Deny all







Supervised

Management Mode:

Locked Enrollment


NoYes

NoYes

Yes


[Tooltip] The value must be between 1 and 100.

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




My DEP Kiosks

NameÙ

Optional

Description




User Affinity


Supervised

Management Mode:

Locked Enrollment

OK

Export

Create

Filter


Apple DEP

Ù

Ù

Device Category

Search

You must assign enrollment program serial numbers to a profile. Profiles define configurations set during enrollment. Learn moreEnrollment Program profiles define configurations that must be set during enrollment, such as user affinity. Learn More


NoYes

NoYes

Yes


Allow Pairing:

Deny all









Supervised mode enables a larger set of config options. Supervised devices remain supervised they are fully reset.

Pairing specifies whether iOS devices can syn computers.

Requires a certificate from pair a supervised device.

Used when to establish trust with th Otherwise, iOS root certificates are

Red stars on flyouts will not make

private preview

[Tooltip] Specifies the maximum number of user data caches to create on the device.

[Tooltip] This mode allows multiple users to sign into the same device. Requires iOS 9.3+ iPads and an Apple School Manager account.

[Tooltip] Locked Enrollment blocks the user from removing the management profile.

Create

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




My DEP Kiosks

NameÙ

Optional

Description




User Affinity


Supervised

Management Mode:

Locked Enrollment

OK

Export

Create

Filter


Apple DEP

Ù

Ù

Device Category

Search



NoYes

NoYes

Yes


Allow Pairing:

Deny all









Create

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




My DEP Kiosks

NameÙ

Optional

Description




User Affinity

Export

Create

Filter


Apple DEP

Ù

Ù

Device Category

Search


Create

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.



Export

Create

Filter


Search



My DEP Kiosks

NameÙ

Optional

Description




User Affinity

Apple DEP

Ù

Ù

Device Category


Create

Enroll with User Affinity

Enroll without User Affinity

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.



Export

Create

Filter


Search




Name this prolife

NameÙ

Optional

Description




User Affinity

None

Device Category

Ù

Ù

Create


Warning Notification appears when user affinity is

changed…

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.




My DEP Kiosks

NameÙ

Optional

Description

Setup Assistant Customization

Appears to end-users on About Configuration Screen

Department NameÙ


Department PhoneÙ


Department EmailÙ

HideShowPasscode

HideShowLocation Services

HideShowRestore

Setup Assistant Screens

HideShowApple ID

HideShowTerms and Conditions

HideShowTouch ID

HideShowApple Pay

HideShowZoom

HideShowSiri

HideShowDiagnostic Data

HideShowVault

Export

Create

Filter


Device Management Settings Configured



User Affinity

Apple DEP

Ù

Ù

Device Category

Displays in Setup Assistant during dev

Displays in Setup Assistant during d

Displays in Setup Assistant durin

Displays in Setup Assistant during de Search


Create OK

HideShowAndroid Migration

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.



Setup Assistant Customization

OK

Business Division ABC IT dept

Department NameÙ

+1 452-555-2929

Department PhoneÙ

[email protected]

Department EmailÙ

Setup Assistant Screens

Export

Create

Filter


Search


HideShowPasscode

HideShowLocation Services

HideShowRestore

HideShowApple ID

HideShowTerms and Conditions

HideShowTouch ID

HideShowApple Pay

HideShowZoom

HideShowSiri

HideShowDiagnostic Data

HideShowVault

HideShowAndroid Migration


My DEP Kiosks

NameÙ

Optional

Description




User Affinity

Apple DEP

Ù

Ù

Device Category


Create

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors


1




Apple Configurator




Sync ready.



Export

Create

Filter


Search



My DEP Kiosks

NameÙ

Optional

Description




User Affinity

Apple DEP

Ù

Ù

Device Category


Create

Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors

Microsoft Azure | Menu ❯ Device Enrollment ❯ Apple Enrollment ❯ Enrollment Program Profiles ❯ My devices Lesley ThomasCONTOSO

1




Apple Configurator




Sync ready.


Overview

My DEP KiosksOverview

Essentials

Created:10/05/2016 5:25:24 PMLast Modified:12/07/2016 11:00:00 AM

User Affinity:No userSerial Numbe 0 serial num

PROFILE ENROLLMENT

Past 30 days

30

20

10

0

28 29 30 31 8/1 2 3 4 5 6 7 8 9

890DEVICES ENROLLED

110DEVICES NOT ENROLLED

Delete

This profile has not been assigned to any serial numbers

Export

Create

Filter


My DEP Kiosks User Yes Business Division AB.. iOS

Resource blade immediataely opens after creation with notification for assignment

Serial Numbers Assigned

MANAGE

Properties

Search


Terms of Use


Device Categories



Overview

MANAGE

SETUP

Apple Connectors

Android Connectors

Getting Started

MONITOR

Enrollment Health


Windows Connectors

Microsoft Azure | Menu ❯ Device Enrollment ❯ Apple Enrollment ❯ Enrollment Program Profiles ❯ My devices Lesley ThomasCONTOSO

1




Apple Device Enrollment Program





Filter items…

Export

Create

Filter

NAME PLATFORM DETAILS MODE DEPARTMENT USER AFFINITY

My devices.. iOS N/A Business Division AB.. User

Enrollment Program profiles define key configurations that must be assigned prior to devices booting. Learn moreOverview

My DEP KiosksOverview

Essentials

Created:10/05/2016 5:25:24 PMLast Modified:12/07/2016 11:00:00 AM

User Affinity:No userSerial Numbers Assigned 0 serial numbers.

PROFILE ENROLLMENT

Delete

This profile has not been assigned to any serial numbers. P0

Essentials meta-data stretch-goal

for MVR

P1

Serial Numbers Assigned

MANAGE

Properties

Past 30 days

750

500

250

0

28 29 30 31 8/1 2 3 4 5 6 7 8 9 10 11 13 13 14 15 16

745DEVICES ENROLLED

110DEVICES NOT ENROLLED

brandonmcrae.combrandonmcrae.com/images/case studies/ibizaconsole... · apple enrollment android...

Documents