Until recently, only macOS devices purchased directly from Apple, or their trusted resellers could be added to Apple Business Manager. This means, if your device was purchased from elsewhere, you would not be able to perform Automated Device Enrollment.
During Worldwide Developers Conference (WWDC21), Apple finally announced the ability to manually add macOS devices to ABM using Apple Configurator on an iPhone. This implies that you can now take full advantage of Automated Device Enrollment regardless of your source of purchase.
Pre-requisites:
Ensure that you are already registered in Apple Business Manager (ABM)/Apple School Manager (ASM). Make sure that Automated Device Enrollment is set up with Hexnode UEM. You must be an administrator in ABM with the Device Enrollment Manager Role.
Mac to be assigned should be running macOS 12.0.1 or later and must have the Apple Silicon or the Apple T2 Security chip.
iPhones running iOS 16 or later.
While adding the device to DEP, it must be wiped and reset. So, ensure that you back up the device via iTunes or iCloud.
This feature is supported on Pro, Enterprise, Ultimate and Ultra pricing plans.
Install Apple Configurator on iPhone
Go to the App Store and install Apple Configurator.
Once installed, open the app and grant access to Bluetooth by clicking OK in the pop-up window. Then click Continue.
Sign in using your Managed Apple ID that has the Device Enrollment Manager role.
Grant access to the Camera to scan pairing codes that appear on Mac.
Once the app is prepared, you can configure additional settings for the device to be added to ABM by tapping the gear icon. You can decide how to connect your Mac to the internet and which MDM server to assign it.
NETWORK CONFIGURATION
To set up your Mac’s internet connection, you can either share the same Wi-Fi network credentials or use a network configuration profile.
Share Network: If you choose this option, the Mac will connect to the internet using the same network credentials as the one configured in the Apple Configurator app of the iPhone when it starts.
Configuration Profile: You need to create a configuration profile with a Wi-Fi or 802.1x payload credentials. Save the profile in a location in the Files app and then configure it in Apple Configurator.
MDM SERVER ASSIGNMENT
On devices running iOS 17 and later, you can assign an MDM server to macOS devices directly from Apple Configurator.
You can either assign your Mac to a specific MDM server or the default MDM server set for Mac’s in Apple Business Manager (ABM).
None: Selecting this option will add the macOS devices to the ABM without assigning any MDM server. You can assign the added macOS devices to the Hexnode UEM server from the ABM portal later.
Default: If you choose this option, the Mac will be assigned to the default MDM server set for Mac in the ABM. To view the default MDM server list for different device types,
Click on the account name at the bottom of the left side panel and navigate to Preferences > MDM Server Assignment > Default MDM Server Assignment.
Specific: When you sign in with your managed Apple ID to the Apple Configurator, all the MDM servers listed under your organization will be synced automatically. By choosing this option, you can assign your Mac to a specific MDM server directly from the Apple Configurator.
Assign macOS devices to ABM
If you’ve purchased a new macOS device and it is yet to get started, skip directly to step 2. On the other hand, if you want to assign an already configured macOS device to ABM, you must erase all existing content and settings on it.
Navigate to Apple Menu and select System Preferences. Now click on Erase All Content and Settings from the System Preferences menu in the menu bar.
In the Erase Assistant option, provide your administrator credentials and review the items that will be erased apart from the content and settings.
Follow the onscreen instructions and wait for the Mac to restart.
Launch the Apple Configurator app on your iPhone when the Mac starts up at Setup Assistant screen.
Hold the iPhone close to the Mac to be assigned. Within a few seconds, the Mac will present the assign screen automatically.
Position the pattern in the circle to scan the image that appears in the Setup Assistant. If the pairing fails, tap on Pair Manually in the Apple Configurator app and select Pair Manually in the lower-left corner of the Setup Assistant on Mac. Now, enter the six-digit code that appears on the screen.
Your device will be assigned within a few seconds.
Once the device is assigned, tap the menu in the lower right corner of the app on the iPhone to see the list of devices assigned by the app.
Assign the added macOS devices to the Hexnode UEM Server
Navigate to Devices. Choose the filter type as Source and then select Manually Added > Apple Configurator. From the list of available devices, you can verify whether your macOS device is added to DEP or not.
Select the required device from the list.
Click on Edit MDM server, select the MDM server to assign the devices with that server.
Open your Hexnode UEM portal and navigate to Enroll > All Enrollments > No-Touch > Apple Business/School Manager. If the process has been successful, you’ll find the devices under DEP Devices. If the devices do not appear here, click Sync with DEP to sync with Apple Business Manager or Apple School Manager.
What happens at the device end?
The DEP configuration profile is associated with the device as soon as the device starts up. The device enrollment is then initiated, and the configuration settings associated with the device will be deployed.
Troubleshooting Tips
Common errors while enrolling in Apple Business Manager.
Common errors while enrolling macOS devices in Hexnode UEM
On your Apple Business Manager portal, navigate to Devices. From the list of available devices, select the devices to be added and click on Edit Device Management. In the Assign to server field, select the MDM server which was configured earlier and click Continue.
On your Apple Business Manager portal, navigate to Devices. From the list of available devices, select the devices to be added and click on Edit Device Management. In the Assign to server field, select the MDM server which was configured earlier and click Continue.
Select your name at the bottom of the sidebar, select Preferences, then select “Apple Business Essentials” under “Your MDM Servers.” Select the Device Enrollment tab. Select “Enroll as company-owned device” for all device types you want to enroll with Device Enrollment upon sign in with a Managed Apple ID.
Launch Apple Configurator , then plug in the Apple TV to power and a monitor or TV. From the Apple Configurator menu, choose Paired Devices. Select your Apple TV in the Paired Devices list, then click Pair. Enter the six-digit personal identification number (PIN) that appears on the screen of your Apple TV.
On your Mac, choose Apple menu > System Settings, then click Bluetooth in the sidebar.(You may need to scroll down.)Hold the pointer over the device in the list, then click Connect. If asked, click Accept (or enter a series of numbers, then press Enter).
Complete the enrollment in the Setup Assistant.In the Devices section of your ABM portal, go to the group labeled Devices added by Apple Configurator.Assign the device to an MDM server.
Bring your iPhone close to the Mac. When the “Add this Mac to Your Organization” dialog appears on the Mac in Setup Assistant, scan the image pattern using the camera of your iPhone with Apple Configurator. The serial number and other information about the Mac are uploaded to Apple Business Manager.
Add an Apple Customer Number or a Reseller Number in the sidebar
In Apple Business Manager , sign in with a user that has the role of Administrator.
Select Devices in the sidebar, enter the Apple Customer Number or Reseller Number, then select Add. You can add more than one Apple Customer Number or Reseller Number.
To release a device from Apple Business Manager, simply click “Device Assignments” and locate the device in question via serial number, order number, or CSV file.Then, simply choose “Release Devices” from the pop-up menu and click “Done.”
In the Profile Manager sidebar, select Users.Select a user, then click the Devices tab.Click the Add button , then select Add Devices. A window appears showing all enrolled devices.
The number of devices that can be enrolled: One device or up to three devices per user. Cloud storage: Additional organization storage for your users. AppleCare support: 24/7 support for admins and users with an AppleCare+ for Business Essentials plan.
In Preferences, select Apple Business Essentials below Your MDM Servers. Select the Device Enrollment tab. For each device type, choose either “Enroll as company-owned devices” or “Enroll as personal devices,” then click Save.
Select Devices in the sidebar, then select Filter. Select Source, select Manually Added and Apple Configurator, then select Search. Select one or more devices, then select Edit next to Edit MDM Server . Choose “Assign to server,” then choose the MDM server you want to assign or reassign the device to.
In Apple Configurator , choose File > New Profile. A new configuration profile document window appears. In the General settings pane, fill in the Name and Identifier fields. To add a payload, select it from the list on the left, click Configure, then enter the settings.
Introduction: My name is Duane Harber, I am a modern, clever, handsome, fair, agreeable, inexpensive, beautiful person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.
