Enrolling Mac devices
Full macOS device management requires both the Ivanti Agent and enrollment with Ivanti Enterprise Mobility Management. MacOS devices are considered integrated devices and can receive both mobile and desktop policies and applications.
Enrolling a macOS device with Modern Device Management allows you to manage settings and apps on the device. You can also sync the device from the console. Once a user enrolls their macOS device, that device appears in the Network View and you can view the device's inventory information. You can enroll multiple users on a macOS device; however, the device itself is enrolled only once. This way, you can differentiate packages on a per-user or device basis.
Before enrolling devices, ensure that you have added an APNS certificate to the core in Tools > Modern Device Management > MDM configurations. For more information, see Apple notification services.
Enrolling a Mac device that doesn't have the Ivanti Agent
To enroll a Mac using the MDM app
1.Install the Ivanti MDM app. The mdmenroller.pkg can be found on the core in the ldlogon\mac directory.
2.Open the Ivanti MDM app. The app can be found in /Library/Application Support/LANDesk/bin.
3.Provide the user's email address and password and click Enroll. If you use Active Directory, you may alternatively provide a domain and user name.
If the device can determine the server address using a DNS look up, it will auto-populate the MDM Server field.
4.If the device is unable to determine the server address using a DNS look up, it prompts the user to enter the server location in the MDM Server field. Enter the information for your enterprise in the following format: [CSA FQDN]/[core FQDN]
5.Once the device is enrolled, the user is prompted to accept the configuration profile.
The device is enrolled with Ivanti Enterprise Mobility Management.
For information about automatically installing the Ivanti Agent when a device enrolls with MDM, see Installing the agent for hybrid management.
Enrolling a Mac device that has the Ivanti Agent
To enroll a Mac using a distribution package
1.Navigate to Tools > Distribution > Distribution packages > Public packages.
2.Right click the Enroll macOS device in Ivanti MDM package and create a scheduled task.
3.Drag and drop the device onto the task and run the task.
The device is enrolled with Ivanti Enterprise Mobility Management.
To enroll a Mac using an enrollment URL
To create enrollment codes
1.In the management console, navigate to Tools > Modern Device Management > MDM Configurations > Apple > Enrollment Codes.
2.Your core and CSA information will be automatically populated. If you would like to change where the device will connect, you can change them here.
3.Select Create a new QR code, and click Create. This will create a URL as well as a QR code. QR codes are used for iOS enrollment.
4.Enter an alias for the code that will help you identify it.
5.(Optional) Select a group to add devices to. For more information, see Create groups in the Network View.
6.(Optional) Enter a message to show the user when they enroll their device.
7.(Optional) Select what enrollment information you want to hide on the enrollment screen.
8.Click Preview.
9.Use the Copy buttons to copy the enrollment URL. Paste the URL into a document or email for distribution. This URL can be used for any number of devices.
10.Click Save to save the codes.
This also saves the codes in Endpoint Manager, so that you can edit or redistribute them later from Tools > Modern Device Management > MDM Configurations > Apple > Enrollment Codes.
To enroll with a URL
1.On the device you want to enroll, click the enrollment URL link or copy it into your browser. You may be directed to the App Store to download the Ivanti Agent app. Install the app, then visit the URL again.
2.Enter your credentials to enroll.
3.After you have enrolled, you will be prompted to install a management profile. You will need to give management permissions to the profile by entering your password.