Dell Mobile Management. Apple Device Enrollment Program

(1)

Dell™ Mobile Management

(2)

Dell™ Mobile Management

Setting up the Apple Device Enrollment

Program

The Apple Device Enrollment Program (DEP) is a part of the Apple Deployment Program that helps businesses and educational institutions easily deploy and configure iOS and OS X devices. DEP provides a fast, streamlined way to deploy institutionally owned iPad and iPhone devices and Mac computers that are purchased directly from Apple or participating Apple Authorized Resellers or carriers

This document gives you an overview of the program features, explains how to enroll, and helps you get started. More detailed and in-depth instructions are provided in the Dell Mobile Management Administrator

Guide. For product and solution details (including technical specifications and support), see the Dell Enterprise

(4)

DMM Device Deployment Program

Prerequisites

The Apple Volume Purchase Program (VPP) is used to distribute paid iOS apps to iOS devices using licenses purchased from an Apple VPP account and to generate a VPP Token that Dell Wyse Cloud Client Manager will use to update license usage information with Apple.

l You must be enrolled in the Apple Deployment Program.

l You can only register devices that have been purchased directly from Apple.

l APNS must be configured in Dell Mobile Management (DMM). This is the Apple MDM Push Notification

Certificate.

l Mobile User accounts must be in DMM.

l You must be a designated Global Administrator in DMM.

l A Cloud Client Manager (CCM) PRO Tier license is required to manage apps and an administrator with

Global Administrator role is required to configure the VPP Token.

l An Apple ID must be associated with the Apple VPP account and the token must be renewed annually.

Each Cloud Client Manager user account should be linked to a unique Apple ID. It is highly recommended to use a corporate Apple ID account and not a personal account.

l A VPP Token for your Apple VPP account. For more information on the Apple VPP program see

https://vpp.itunes.apple.com.

(5)

Configure Apple VPP Token in DMM

In order to distribute paid iOS apps, an Apple VPP account must be created for the organization and a VPP Token must be uploaded to Dell Mobile Management (for details on the Apple VPP account see

https://vpp.itunes.apple.com). The VPP Token is used to sync license usage information with Apple.

NOTE:The token needs to be renewed whenever a new token is generated from the Apple VPP account - it is also required to be renewed each year.

To configure the VPP token, you will 1. Download the Apple VPP Token

2. Assign VPP App Licenses

3. Configure your virtual MDM

4. Add a profile

5. Assign profile to devices

6. Enroll a device

Download Apple VPP Token

1. Openhttps://vpp.itunes.apple.comthen click the Business Volume Purchase Program button. 2. Enter your Apple ID and Password then click Sign In.

3. On the Volume Purchase Program screen, click Account Summary.

(6)

5. Sign in to DMM and click Portal Admin > Apple VPP.

6. Click Upload New VPP Token. DMP displays the Upload VPP Token screen.

7. 7. Click Browse... to select the VPP Token .txt file downloaded in the previous step. Optionally, enter the Apple ID used to configure this account, as a reference.

8. Click Upload VPP Token to complete the configuration of the Apple VPP Token with DMM.

Once the token has been uploaded, the Apple VPP page will display the expiration date for the current VPP Token. It will also have options for renewing the VPP Token and syncing the VPP licenses and users. Use Sync

VPP licenses to update the purchased and assigned app licenses and Sync VPP Users to sync user registration

(7)

Assign VPP App Licenses

The VPP licenses are automatically assigned to users and devices when required. To configure a paid iOS app: 1. In DMM, click Apps & Data.

2. Click Add Apps.

3. Use the Search Type, Device Type, and Country fields to search for the app you want to add. 4. Locate the app in the displayed list and check the checkbox beside the app name.

5. Click Add to Inventory.

6. To configure the app as a managed app, go to Apps & Data then Mobile Policies. Select the app and click Edit Policy.

7. Set the app policy as needed and click Save.

Configure Virtual MDM

1. Log in to the Apple DEP program athttps://deploy.apple.com. You will receive a code on your phone in order to complete the two-step authentication process.

(8)

3. Enter an MDM Server name.

4. Upload the Dell Mobile Management Public Key from Step 3.

5. Download your server token.

6. In DMM, click the Portal Admin tab.

7. In the Console Settings list on the left, click Apple DEP.

(9)

10. Log in to your Apple DEP athttps://deploy.apple.com. You will receive a code on your phone in order to complete the two-step authentication process.

11. On the Apple DEP Portal, click Manage Devices.

12. Assign the devices to your server by serial number.

13. Click OK then, on the confirmation window, click OK.

(10)

and in the Devices tab.

Add A Profile

1. In DMM, click Portal Admin.

2. In the Console Settings area on the left, click Apple DEP.

3. Click the profile name displayed (Test Server 1 in the following screenshot example).

4. On the DEP Server Details screen, click +Add Profile.

DMM displays the DEP Profile screen in three sections where you will identify the new profile then select and unselect the desired settings.

(11)

1. In the Profile Name textbox, enter a descriptive name for this profile.

2. In the Department/Location textbox, enter a name for this department/location (optional). 3. In the Support Phone Number textbox, enter a phone number users can call to get help (optional).

Device Management Settings

1. To force the device to be managed by an MDM before being set up, select the Make MDM Profile

Mandatory during Device Setup checkbox.

2. Selecting the Set Device as Supervised checkbox provides a greater control over the devices by adding “Supervised” payloads.

3. Selecting the Allow User to Remove MDM profile from Device Settings checkbox allows the user to remove the MDM profile and become unmanaged.

4. To allow devices to be synced with iTunes, check the Allow Device Pairing with PC/Mac

(iTunes/iPCU) checkbox.

Device Management Settings

1. To disable Location Services during device activation, check the Skip Location Services checkbox. 2. To disable restoring from backup during device activation, check the Skip Restoring from

Backup checkbox.

3. To disable signing in to Apple ID and iCloud during device activation, check the Skip AppleID and iCloud

Sign in checkbox.

(12)

8. Click Save. The new profile now displays in the DEP server details table.

Assign a Profile to Devices

1. In DMM, click the Portal Admin tab.

2. In the Console Settings list on the left, click Apple DEP.

3. Click the profile name displayed (Test Server 1 in the following screenshot example).

4. Click the Devices tab (not the top-level Devices menu).

(13)

6. From the Select Profile drop-down list, select the desired profile.

7. Click Assign Profile.

The profile is now assigned to the device as shown in the Assigned Profile column.

VPP Enrollment for Mobile Users

In order for users to receive managed apps distributed to them from the Apple VPP program, users must first accept the terms of the program to associate their iTunes account with the corporate Apple VPP account. This only needs to be done once and not per-managed app.

(14)

Enroll a Device

1. Turn on the DEP Device.

2. Follow the device activation steps. The steps depend on the DEP profile settings. SeeAdd a Profile. 3. Sign in with a valid DMM username and password.

(15)

Operational Considerations

Each Cloud Client Manager user account should be linked to a unique Apple ID. Multiple devices can be linked to a given Cloud Client Manager account; however, different Cloud Client Manager accounts should not share a single Apple ID account, otherwise there may be issues automatically assigning paid iOS apps to the CCM accounts. In that case, the workaround is for the user to manually install the app from the device.

(16)

About Dell Mobile Management

Dell Mobile Management (DMM) provides IT administrators with a tool to help securely manage and enable corporate access to a wide range of solutions and devices including thin clients, zero clients, cloud devices, workspace applications, smartphones, and tablets.

DMM provides visibility not only into managed devices, but also insight into which employees have used them and what IT assets have been accessed. DMM is available from any location through standard Web browsers over the Internet.

About Dell

Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information on DMM, visit our support portal at

http://software.dell.com/products/mobile-management/.

Technical Support

To access Dell Enterprise Mobility Management technical resources (create a Service Request), visit

https://support.software.dell.com/create-service-request.

NOTE:You must register with Dell Support to place a service request. New to Dell Software Support? Check out the Getting Started section of Dell Software Support at

https://support.software.dell.com/essentials/getting-started.

If you still need help, call Technical Support at 1-800-306-9329 (toll free in U.S. and Canada) or 949-754-8000 or 949-754-8080. Hours of operation are from 5:00 A.M. to 5:00 P.M. Pacific Standard Time, Monday through Friday.

Trademarks

(17)

Restricted Rights

You acknowledge that the Software is of U.S. origin. You agree to comply with all applicable international and national laws that apply to the Software, including the U.S. Export Administration Regulations, as well as end-user, end-use and country destination restrictions issued by U.S. and other governments. For additional information on exporting the Software, seehttp://www.microsoft.com/exporting.

Ordering Information

For availability, pricing, and ordering information in the United States and Canada, call 1-800-438-9973 or visit us atDell.com. In all other countries, contact your sales representative.

About This Guide

This guide is intended for system administrators. It provides instructions for setting up the Apple Deployment Program (ADP) as part of the Dell mOBBILE Management included with the Dell Enterprise Mobility

Management. This guide is a companion document to the more comprehensive and detailed Dell Mobile

(18)

End User License Agreement

(“License”)

A copy of the End User License Agreement is included in the software and provided for your reference only. The License at http://www.dell.com/wyse/licenses as of the purchase date is the controlling licensing agreement.

(19)

Copyright

Dell, Dell Mobile Management, and DMM are trademarks of Dell, Inc. All other product or company names may be trademarks of their respective owners.

This documentation (and the software described herein) is provided based on your prior agreement to a license agreement governing its use.

This document and the software and firmware described in it are copyrighted. You may not reproduce, transmit, transcribe, store in a retrieval system, or translate into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, any part of this publication without express written permission.

A copy of the licensee agreement can be found on the web (for individuals) or in the signed written agreement between you, or your company, and Dell, Inc. (and/or its resellers and distributors).

(20)

About Dell Software

Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information, visitwww.software.dell.com.

Contacting Dell Software

Technical Support:

Online Support

Product Questions and Sales:

(800) 306-9329

Email:

[email protected]

Technical support resources

Technical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions. To access the Support Portal, go to

http://software.dell.com/support/.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the portal provides direct access to product support engineers through an online Service Request system.

The site enables you to:

l Create, update, and manage Service Requests (cases) l View Knowledge Base articles

l Obtain product notifications

l Download software. For trial software, go toTrial Downloads. l View how-to videos

Dell Mobile Management. Apple Device Enrollment Program