Overview

This document will detail the process to enroll iOS devices into Faronics MDM as Supervised Devices using Apple Configurator 2 and the Apple School Manager / Apple Business Manager site.

Enrolling the device as a supervised device in Faronics MDM provides a greater level of control over the device compared to simply enrolling the device manually in the service. Additionally adding the device to your Apple Schools Manager or Apple Business Managers device inventory makes re-enrollment allows for zero-touch enrollment with the device in the future.

Requirements

Performing the enrollment process will require that you have access to the following;

• Computer system running macOS with Apple Configurator 2 installed.
• Access to the Apple School Manager - or - Apple Business Manager
• Access to an iOS device that is not currently part of your device inventory in Apple School Manager or Apple Business Manager.
• Faronics MDM is properly configured with a valid Apple Push Certificate and properly configured to work with Apple’s Device Enrollment program through Apple Schools Manager or Apple Business Manager.

Please note - While this process can add your devices to your device inventory the initial process of adding the device will add the device in a provisional mode for the first 30 days. During this provisional time period, the device can be removed from your device inventory by the end user. After 30 days the device will be bound to your inventory and will have to be manually released through Apple School Manager / Apple Business Manager.

Process

Step 1 - Configure a Supervision Identity

1. Open Apple Configurator 2 and select preferences from the menu bar.
2. In the preferences, dialog click on “Organizations” at the top of the window.
3. Click on the small “+” icon on the bottom left of the screen.
4. Follow the prompts to sign in to your Apple Schools Manager / Apple Business Manager account.
   
5. Select the option to use an existing supervision identity and click Next.
   
6. Click “Choose” and select the supervision identity that you want to use and click Choose.
   
7. Click on Done to accept the changes. You should now see your Organization listed in the preferences window.
   
   
   

Step 2 - Configure the MDM Enrollment URL

1. Click on “Servers” in the preferences window of Apple Configurator 2
   
2. Click on the small “+” icon on the bottom left of the screen.
   
3. Follow the prompts and provide the enrollment URL for your Faronics MDM instance to Apple Configurator.  The enrollment URL can be found by accessing Faronics MDM, clicking on the Device Page, and then clicking on Enroll Device. The URL will be displayed at the bottom of the page under the heading Apple Configurator.
   
4. Once you have provided the URL and a name for the MDM service click on Next.
5. Once completed the MDM service should be displayed in the Preferences window as shown below.
6. Once these two steps are complete close the preferences window.

Step 3 - Enroll the device.

1. Connect your iOS device, in our case an iPad, to the system running Apple Configurator.
2. Once detected the device will be shown in Apple Configurator, right click on the device and select the option Prepare....
   
3. In the dialog that is shown select Manual Configuration and select the following options;
   1. Add to Device Enrollment Program - Checked
      1. Activate and Complete enrollment - Checked
   2. Supervise Device - Checked
4. Once selected click Next.
5. Next, a list of configured MDM Servers will be shown, select the appropriate one from the drop-down and click Next.
   
6. Next, a list of Organizations that are configured in Faronics MDM will be shown. Select the appropriate Organization from the drop-down list and select Next
   
7. Next, select the desired options for the setup assistant and click Next
   
8. Select the Wireless Configuration Policy - if any - and click Next.
   
9. Next, you will see a prompt for enrollment credentials, leave these blank and click Prepare.
10. The device will now be reset and enrolled into Faronics MDM. This may take some time to complete.
    
    

Once the device is enrolled you may wish to move the Device to the appropriate MDM server in Faronics MDM. Enrolling the device into Apple Schools Manager / Apple Business Manager in this way results in the devices being added under the “Added by Apple Configurator 2” MDM server, moving them to the appropriate MDM server that is tied to Faronics MDM will allow for devices to be enrolled automatically in the future.