Managing Apple Device Enrollment accounts

After adding one or more Apple Device Enrollment accounts to an Ivanti EPMM instance, several actions are available to help manage the accounts, including:

For instructions on how to set up a Device Enrollment profile, see Setting up Apple Device Enrollment with Ivanti EPMM.

Viewing Apple Device Enrollment accounts in Ivanti EPMM

After setting up Apple Device Enrollment accounts in an Ivanti EPMM instance, you can view the status of these accounts.

Procedure 

  1. In Admin Portal, go to Devices & Users.

  2. Select Apple Device Enrollment to display the list of accounts enrolled on the Ivanti EPMM instance.

    If you have not added an Apple Device Enrollment account to a particular Ivanti EPMM instance, a message is displayed instead of an Apple Device Enrollment account list. The message explains that no Apple Device Enrollment accounts are associated with this Ivanti EPMM instance yet.

    The information available for each Apple Device Enrollment account is listed in the following table:

    Table 16.  Apple Device Enrollment account information

    Item

    Description

    Account Name

    (Select on column heading to sort alpha-numerically.)

    Name assigned to account.

    Admin Apple ID

    (Select on column heading to sort alpha-numerically.)

    Administrator ID received from Apple.

    Organization Name

    (Select on column heading to sort alpha-numerically.)

    Name that you provide to Apple for the organization associated with the Device Enrollment account. Apple uses this name when displaying messages about the account.

    Description

    Description that you provide to Apple for the organization associated with the Apple Device Enrollment account.

    Status

    (Select on column heading to sort alpha-numerically.)

    Account status can be one of three states:

    • Active, indicates the Ivanti EPMM instance is associated with one or more active Apple Device Enrollment accounts.
    • Invalid Token, indicates the Apple server token is either expired or invalid.
    • Inactive, indicates the Ivanti EPMM instance is associated with a deleted Apple Device Enrollment account.

    Expires

    (Select on column heading to sort alpha-numerically.)

    Date the server token expires.

    Devices

    Number of devices in the Apple Device Enrollment account. Select the number to view the devices in the Devices page.

    Enrollment Profiles

    Number of enrollment profiles defined for the Apple Device Enrollment account. Select the number to list the enrollment profiles (see Creating an Apple Device Enrollment profile for Apple School Manager.)

    You can also run a search using the Filter Enrollment Profiles search bar in the top right corner of the page.

Editing Apple Device Enrollment account information

Most Apple Device Enrollment account information is derived from Apple, and cannot be edited in Ivanti EPMM. To edit the Apple-derived device account information, log in to your Apple School Manager and make the changes.

When the server token associated with the account is expiring, you can then change the server token by editing the Ivanti EPMM Apple Device Enrollment account in Ivanti EPMM.

Procedure 

  1. In Admin Portal, go to Devices & Users > Apple Device Enrollment, and then select an account.
  2. Go to Actions > Edit Account.
  3. (Optional) To change the server token, select Browse, locate the file, select it, and then select Open.
  4. (Optional) To change the account description, edit the text in Account Description.
  5. Select Save.

Removing or Re-assigning Apple Device Enrollment profile assignments

This section addresses the removal or re-assigning of Apple Device Enrollment profiles.

Removing Apple Device Enrollment profiles

Removing Apple Device Enrollment devices from an enrollment profile removes the MDM and setup options from the devices.

After Apple Device Enrollment profile assignments are pushed to devices and the devices complete setup, removing the Apple Device Enrollment profile assignments or changing the device profiles has no effect on existing devices until the device is wiped or reset.

Procedure 

  1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.

  2. In the row of the desired account, select the number in the Enrollment Profiles column.

    Ivanti EPMM lists the defined enrollment profiles for that account.

  3. Select the number in the Devices column within the selected enrollment profile.
  4. Select the profile and then select Actions > Remove Enrollment Profile. Alternately, you can reassign the device to a new profile by selecting Actions > Assign Enrollment Profile.
  5. When prompted, select Yes to remove the devices from the enrollment profile or No to cancel the deletion.

Re-assigning Apple Device Enrollment profiles

  1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.
  2. In the row of the desired account, select the number in the Devices column within the selected enrollment profile.
  3. Select the profile and then select Actions > Assign Enrollment Profile.

Deleting Apple Device Enrollment profiles

Deleting an Apple Device Enrollment profile allows you to remove a set of mobile device management (MDM) features associated with the devices assigned to a given Apple Device Enrollment account. When there is a default device enrollment profile and you try to delete a different enrollment profile, Ivanti EPMM re-assigns the device to the default device enrollment profile instead of deleting it.

Procedure 

  1. In Admin Portal, go to Devices & Users > Apple Device Enrollment.

  2. Select an account and select the number in the Enrollment Profiles column for that account.

    Ivanti EPMM lists the defined enrollment profiles for that account.

  3. Select the enrollment profile to delete, and then go to Actions > Delete.
  4. When prompted, select Yes to delete the profile or No to cancel the deletion.

Deleting Apple Device Enrollment accounts

If you delete an Ivanti EPMM Apple Device Enrollment account, you are deleting the mapping between Ivanti EPMM and the Apple MDM servers. Deleting a Device Enrollment account from Ivanti EPMM does not have any affect on the Apple Device Enrollment account.

Procedure 

  1. In Admin Portal, go to Devices & Users > Apple Device Enrollment, and then select one or more accounts.
  2. Go to Actions > Delete Account.
  3. When prompted, select Yes to delete the chosen accounts or No to cancel the action.

Disowning devices enrolled in Apple Device Enrollment

If a device enrolled in Apple Device Enrollment is sold, lost or damaged beyond repair, you can remove that device from the Apple Device Enrollment portal through the MDM server. Removing the device is called "release device" or "disown device" depending upon what portal you are looking at.

Once a device enrolled in Apple Device Enrollment is disowned, Ivanti EPMM cannot add it back. The Disown action is disabled by default and is not included in the list of actions for devices in Apple Device Enrollment. To add Disown to Actions into the Apple Device Enrollment page, call Customer Support.

Related topics 

Setting up Apple Device Enrollment with Ivanti EPMM