Note: The Apple Device Enrollment Program (DEP) is now commonly referred to as “Apple Automated Enrollment Program (ADE)” and exists as part of Apple Business Manager. While some information in this article regarding DEP is still relevant, we suggest that you read the aforementioned linked articles above to learn more.
The Apple Device Enrollment Program, often referred to as “DEP” allows organizations to preconfigure the initial setup process on newly purchased devices, and starting with iOS 11, with already purchased devices as well. Organizations can, for instance, place devices in supervised mode, enroll them in an MDM program, and skip Apple Pay or “Restore from Backup” setup panes.
DEP is almost always used in tandem with an MDM. This article explains how to link SimpleMDM to your Apple DEP account and how to add and initialize new iOS devices.
If you haven’t already, you may apply for a free Apple DEP account on Apple’s website. Please note that this process can take a matter of days to complete and generally requires that your organization has a D-U-N-S number. In short, you will need to follow this link to visit Dun & Bradstreet on the web. More helpful information on obtaining a D-U-N-S number for the purposes of the Device Enrollment Program is available from Apple Support.
SimpleMDM needs to link to your DEP account so that it can configure devices to use the SimpleMDM service. To link Apple DEP to SimpleMDM, a certificate must be exchanged between the accounts to establish a secure, trusted relationship.
Sign into SimpleMDM and click the “Devices” link on the left-hand side of the screen.
Click the “Enrollments” sub-menu option.
On the Enrollments page, click the “Apple DEP” tab.
Click “Add Account”.
Follow the on-screen steps based on whether you are using Apple Business Manager or a legacy Apple DEP account. These steps will guide you through the certificate exchange process.
Once you have uploaded your Apple server token, SimpleMDM will link to your Apple DEP / Business Manager account.
Once this certificate is uploaded, your DEP account is successfully linked.
Linking Apple DEP to SimpleMDM establishes a channel of communication between the two services. The next step is to make SimpleMDM aware of the devices in your DEP account.
Within the Apple DEP Portal, assign your devices to the SimpleMDM server. This action grants SimpleMDM the ability to see these devices.
Within SimpleMDM, return to the DEP interface by clicking Devices and then the Enrollments sub-menu option. Select the Apple DEP tab. Click the “Sync with Apple” button.
This will cause SimpleMDM to communicate with your Apple DEP account and become aware of any new devices you’ve added. Once this step completes, you should see the devices count in the SimpleMDM DEP interface increment to the correct count. These devices haven’t been added to SimpleMDM yet, but now SimpleMDM is aware of them in the DEP Portal.
Now that your devices are associated and SimpleMDM is aware of their DEP records, it’s time to start them up.
Helpful tip: If you’ve previously turned these devices on and completed the series of setup panes, they will need to be reset. This is because the devices only check in with the DEP service when they have not yet been set up. To re-initialize a device, on the device, go to Settings, General, Reset, and select “Erase all content and settings”. Your device will wipe itself and then restart, entering the DEP setup process.
Turn on your device for the first time. The device may ask a few initial setup questions.
If the device asks for WiFi information, be sure to select a wireless network that has internet access. Internet access is required to complete the DEP process.
Once the device has gained internet access, the setup process will conform to the DEP settings you created.
When the setup process has been completed, the device will appear under Devices in the SimpleMDM interface.
At this point, the device has been fully initialized and enrolled in SimpleMDM. Congrats!
DEP enrolls devices in SimpleMDM when they are initially set up. It does not have the ability to enroll devices that have already been initialized. To add these devices you will need to reset the device to an initial factory state. On the device, go to Settings, General, Reset, and select “Erase all content and settings”.
If your device started in the initialization process but did not seem to represent your DEP configurations, it could be that SimpleMDM is not aware of the device yet. Be sure to complete the steps in the Associate Devices section above whenever you’ve purchased new devices.
SimpleMDM is a mobile device management solution that helps IT teams securely update, monitor, and license Apple devices in a matter of minutes — all while staying on top of Apple updates automatically.