Enrolling iOS devices
Enrolling an iOS device in Modern Device Management allows you to manage settings and apps on the device. You can also sync, wipe, lock, or unlock the device from the console.
Once a user enrolls their mobile device, that device appears in the Network View and you can view the device's inventory information.
Enrollment codes
Enrollment codes require less manual information input on the device than manual enrollment. This method is useful for enrollment performed by the device user and bulk enrollment.
A single process is used to create an enrollment QR code and an enrollment URL. Either code can be used, depending on what suits your needs best. Both will have the same outcome. Once created, these codes can be distributed to device users via email, document, messaging system, internal web page, etc.
To create enrollment codes
1.In the management console, navigate to Tools > Modern Device Management > MDM Configurations > Apple > Enrollment Codes.
2.Your core and CSA information will be automatically populated. If you would like to change where the device will connect, you can change them here.
3.Select Create a new QR code, and click Create.
4.Enter an alias for the code that will help you identify it.
5.(Optional) Select a group to add devices to. For more information, see Create groups in the Network View.
6.(Optional) Enter a message to show the user when they enroll their device.
7.(Optional) Select what enrollment information you want to hide on the enrollment screen.
8.Click Preview.
9.(Optional) Customize your code by adding a logo and selecting its colors. Using two colors with good contrast (such as a dark color and a light color) makes scanning easier.
10.Use the Copy buttons to copy the QR code or the enrollment URL. Paste these into a document or email for distribution.
11.Click Save to save a .png of the QR code.
This also saves the codes in Endpoint Manager, so that you can edit or redistribute them later from Tools > Modern Device Management > MDM Configurations > Apple > Enrollment Codes.
The copied/saved QR code or enrollment URL can be distributed to users.
To enroll with a QR code
1.Scan the code with the camera of the device you want to enroll.
•If the device is running iOS 14 or newer, an app clip of the Ivanti Agent will open.
•If the device is running iOS 13 or older, you will be directed to the App Store to download the Ivanti Agent app. Install the app, then scan the code again.
2.Enter your credentials to enroll.
3.After you have enrolled, you will be prompted to install a management profile. You will need to give management permissions to the profile in Settings > General > Device Management > Profile.
To enroll with a URL
1.On the device you want to enroll, tap the enrollment URL link or copy it into your browser.
•If the device is running iOS 14 or newer, an app clip of the Ivanti Agent will open.
•If the device is running iOS 13 or older, you will be directed to the App Store to download the Ivanti Agent app. Install the app, then visit the URL again.
2.Enter your credentials to enroll.
3.After you have enrolled, you will be prompted to install a management profile. You will need to give management permissions to the profile in Settings > General > Device Management > Profile.
Manual enrollment
Manual device enrollment assumes that an administrator who knows your core server information is enrolling the device.
To manually enroll an iOS device
1.Download the Ivanti agent from the Apple App Store by navigating to the following URL:
https://itunes.apple.com/us/app/landesk-agent/id1071187320
2.Open the app.
3.Provide the user's credentials and the core server information, and tap Enroll.
If the device can determine the server address using a DNS look up, the server field will auto-populate the enrollment URL when moving to the password field. If the device is unable to determine the server address using a DNS look up, the server field remains blank. Provide the enrollment URL provided by your administrator.
4.Once the device is enrolled, the user is prompted to accept a management profile. If the profile has not been signed, or has been signed by a certificate that the device doesn't trust, there is a warning displayed to the user. The user must allow profile installation for the device to be managed.
Once the user allows profile installation, default settings are applied and the device downloads any software assigned to it.