Managing Apple Device Enrollment accounts

After adding one or more Apple Device Enrollment accounts to a MobileIron Core instance, several actions are available to help manage the accounts, including:

• Viewing Apple Device Enrollment accounts in MobileIron Core
• Editing Apple Device Enrollment account information
• Removing or Re-assigning Apple Device Enrollment profile assignments
• Deleting Apple Device Enrollment profiles
• Deleting Apple Device Enrollment accounts
• Disowning devices enrolled in Apple Device Enrollment

For instructions on how to set up a Device Enrollment profile, see Setting up Apple Device Enrollment with MobileIron Core.

Viewing Apple Device Enrollment accounts in MobileIron Core

After setting up Apple Device Enrollment accounts in a MobileIron Core instance, you can view the status of these accounts.

Procedure 

1. In Admin Portal, go to Devices & Users.

2. Click Apple Device Enrollment to display the list of accounts enrolled on the MobileIron Core instance.

   NOTE:

   If you have not added an Apple Device Enrollment account to a particular MobileIron Core instance, a message is displayed instead of an Apple Device Enrollment account list. The message explains that no Apple Device Enrollment accounts are associated with this MobileIron Core instance yet.

   The information available for each Apple Device Enrollment account is listed in the following table:

   Item	Description
   Account Name	Name assigned to account.
   Admin Apple ID	Administrator ID received from Apple.
   Organization Name	Name that you provide to Apple for the organization associated with the Device Enrollment account. Apple uses this name when displaying messages about the account.
   Description	Description that you provide to Apple for the organization associated with the Apple Device Enrollment account.
   Status	Account status can be one of three states: • Active, indicates the MobileIron Core instance is associated with one or more active Apple Device Enrollment accounts. • Invalid Token, indicates the Apple server token is either expired or invalid. • Inactive, indicates the MobileIron Core instance is associated with a deleted Apple Device Enrollment account.
   Expires	Date the server token expires.
   Devices	Number of devices in the Apple Device Enrollment account. Click the number to view the devices in the Devices page.
   Enrollment Profiles	Number of enrollment profiles defined for the Apple Device Enrollment account. Click the number to list the enrollment profiles (see Creating Apple Device Enrollment profiles.)

Editing Apple Device Enrollment account information

Most Apple Device Enrollment account information is derived from Apple, and cannot be edited in MobileIron Core. To edit the Apple-derived device account information, log in to your Apple School Manager and make the changes.

When the server token associated with the account is expiring, you can then change the server token by editing the MobileIron Core Apple Device Enrollment account in Core.

Procedure 

1. In Admin Portal, go to Devices & Users > Apple Device Enrollment, and then select an account.
2. Go to Actions > Edit Account.
3. (Optional) To change the server token, click Browse, locate the file, select it, and then click Open.
4. (Optional) To change the account description, edit the text in Account Description.
5. Click Save.

Removing or Re-assigning Apple Device Enrollment profile assignments

This section addresses the removal or re-assigning of Apple Device Enrollment profiles.

Removing Apple Device Enrollment profiles

Removing Apple Device Enrollment devices from an enrollment profile removes the MDM and setup options from the devices.

NOTE:

After Apple Device Enrollment profile assignments are pushed to devices and the devices complete setup, removing the Apple Device Enrollment profile assignments or changing the device profiles has no effect on existing devices until the device is wiped or reset.

Procedure 

1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.

2. In the row of the desired account, click the number in the Enrollment Profiles column.

   MobileIron Core lists the defined enrollment profiles for that account.

3. Click the number in the Devices column within the selected enrollment profile.
4. Select the profile and then select Actions > Remove Enrollment Profile. Alternately, you can reassign the device to a new profile by selecting Actions > Assign Enrollment Profile.
5. When prompted, click Yes to remove the devices from the enrollment profile or No to cancel the deletion.

Re-assigning Apple Device Enrollment profiles

1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.
2. In the row of the desired account, click the number in the Devices column within the selected enrollment profile.
3. Select the profile and then select Actions > Assign Enrollment Profile.

Deleting Apple Device Enrollment profiles

Deleting an Apple Device Enrollment profile allows you to remove a set of mobile device management (MDM) features associated with the devices assigned to a given Apple Device Enrollment account. When there is a default device enrollment profile and you try to delete a different enrollment profile, Core re-assigns the device to the default device enrollment profile instead of deleting it.

Procedure 

1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.

2. Select an account and click the number in the Enrollment Profiles column for that account.

   MobileIron Core lists the defined enrollment profiles for that account.

3. Select the enrollment profile to delete, and then go to Actions > Delete.
4. When prompted, click Yes to delete the profile or No to cancel the deletion.

Deleting Apple Device Enrollment accounts

If you delete a MobileIron Core Apple Device Enrollment account, you are deleting the mapping between Core and the Apple MDM servers. Deleting a Device Enrollment account from Core does not have any affect on the Apple Device Enrollment account.

Procedure 

1. In Admin Portal, go to Devices & Users > Apple Device Enrollment, and then select one or more accounts.
2. Go to Actions > Delete Account.
3. When prompted, select Yes to delete the chosen accounts or No to cancel the action.

Disowning devices enrolled in Apple Device Enrollment

If a device enrolled in Apple Device Enrollment is sold, lost or damaged beyond repair, you can remove that device from the Apple Device Enrollment portal through the MDM server. Removing the device is called "release device" or "disown device" depending upon what portal you are looking at.

NOTE:

Once a device enrolled in Apple Device Enrollment is disowned, MobileIron cannot add it back. The Disown action is disabled by default and is not included in the list of actions for devices in Apple Device Enrollment. To add Disown to Actions into the Apple Device Enrollment page, call Customer Support.

Related topics 

Setting up Apple Device Enrollment with MobileIron Core