Enroll iOS devices

Enrolling Devices is the first stage in managing a mobile device, this document will explain you in detail about various steps involved in enrolling the device.

Follow the steps mentioned below to enroll the devices.

Enrolling Devices

  1. Click  MDM tab on the Desktop Central Console

  2. Under Settings click on Enrollment

  3. Click  Enroll Device and fill in the appropriate information

  4. Domain Name : Choose the Domain Name from the drop down, if you do not have any domain name, select  Default Workgroup

  5. User Name- Enter the user name of the device that needs to be enrolled.

  6. Email address :It is mandatory to  enter the email address of the user who will receive the enrollment request.

  7. Platform: Specify the platform from the drop down menu, as iOS or Android. You can also configure the email template which will be sent as enrollment request.

  8. Owned By : Owner of the device either Corporate or Personal

  9. Click Enroll to enroll the device.

  10. Assign to Group : Specify the group to which the device should be added. If you select an existing group from the drop down, then the newly added device will automatically get all the apps and profiles which were already distributed to the group. By doing so you can automate the process of imposing the minimum required restrictions and apps to all the newly added devices.

    If you add a new group name, then a new group will be created and the device will be added to it.

       Note :   Ensure that you configure your Proxy settings, and the mail server settings, so that you the user can receive the email with the authentication     passcode.

After enrollment Users will receive an email with the  enrollment instructions and the link to enroll the devices. Based on the authentication policy defined for enrollment, users will be receiving the authentication passcode.  Users need to manually install the MDM profile by clicking on the enrollment request. All enrolled devices will be listed in the Devices Tab in the Desktop Central MDM console under Groups and Devices.

Enroll Additional devices for same user

You can enroll multiple devices for the same user. In case a user has more than one mobile device that needs to be managed,  you can enroll those devices by following the steps mentioned below;

  1. Click MDM Tab

  2. Under Settings choose Enrollment

  3. Under Enrollment tab choose the User Name to whom you wanted to enroll the additional device

  4. Under Actions click   button

  5. Specify the Platform as iOS or Android

  6. Specify the  Owned By type as Corporate or Personal and click Enroll

The mail to enroll additional device would be sent to the specified user.

Bulk Enrollment

This option facilitates you to enroll many devices at a same time. You can simply create a csv file with the User Name, Domain Name, Email, Platform and Owned by details and upload the same. Multiple entries should be in separate lines. Refer the below mentioned csv file for example,

Sample CSV Format


 Note :

     1. The CSV file should contain the following fields: User Name, Domain Name, Email, Platform,Owned By and Group Name.
    2. The fields User Name, Email and Platform are mandatory. All the other fields are optional.
    3. The first line of the CSV is the column header and the columns can be in any order.
    4. Blank column values should be comma separated.
    5. If the column value contains comma, it should be specified within quotes.

Follow the steps mentioned below, to enroll devices through Bulk Enrollment.

  1. Click  MDM tab on the Desktop Central Console

  2. Under Settings Click on Enrollment

  3. Click  Bulk Enrollment . A window opens, click Browse to upload the created CSV file and Import the same.

    Enrollment mail will be sent to all the users listed in the csv file.

Enrollment Process on iOS devices.

The users, upon receiving the enrollment requests, can enroll their device as below:

  1. Users should note down the Unique Passcode. Passcode is case sensitive.

  2. Clicking the link in the email will open a window to accept the passcode

  3. User should specify the passcode received in the email and click Continue. It will validate the passcode and present a confirmation screen. Click Continue

  4. Click Install to install the profile

  5. It will display a warning message. Read and click Install

  6. The profile will be installed.

  7. Click Done to view the enrollment status

    The device have been enrollment process has been successfully completed and the device will be listed in Desktop Central.

Once the device enrollment is completed, the device will be scanned and the users will receive a App Catalog and MDM Profile . All the Apps that are distributed by Desktop Central will be listed in the App Catalog.  Users can choose the App and install them by clicking on it. Incase of App store App, by clicking on the App users will be prompted to enter their Apple ID and password and the App will be downloaded from the App store. MDM profile is the profile used by Desktop Central to manage the mobile device, if the user removes the MDM Profile, then all the Apps that has been installed  through Desktop Central and the policies applied will be reverted.

Enrolling Devices using Apple Configurator :

You can use Apple configurator to enroll multiple devices at a same time. To know more about apple configurator, refer to this.  Ensure that you configure WiFi profile in the configurator. Follow the steps mentioned below to enroll multiple devices using Apple configurator. Apple Configurator can be used only for devices running on iOS 6 or above. If any device with lower versions are used, then the Operating System of the devices will be automatically upgraded to the latest.

WiFi profile is mandatory for enrolling new devices using Apple Configurator. If the devices are already managed by Configurator, then WiFi profile is not required and only MDM profile can be pushed to the devices. Whenever a secure WiFi profile and MDM profile is applied together, there is a possibility for MDM profile installation to fail. In some cases a secure WiFi Profile requires a minimum time to establish WiFi connectivity whereas the MDM profile will try to contact the Desktop Central Server in the meanwhile and the communication would fail. So if you wanted to use a Secure WiFi Profile it is recommended to apply the WiFi profile first and then the MDM profile. Else you can use an insecure WiFi profile along with MDM profile for successful installation.

  1. Create a Wifi Profile

  2. Create and Export MDM Profile

  3. Push MDM Profile through Apple Configurator

  4. Renaming Common User Name

Creating a WiFi Profile

You need to create a WiFi profile using Apple Configurator. Before you start using Apple Configurator ensure that your Mac is running on 10.7 or later versions of operating systems. It is recommended to update your iTunes before installing the Apple Configurator Utility.

To create a WiFi profile in Apple Configurator follow the steps mentioned below;

  1. Open Apple Configurator Tool
  2. Click on Prepare icon
  3. Under Settings enter the name of the Wifi Profile.
  4. Click Add button at the bottom of the profiles to create a insecure WiFi Configurator Profile
  5. Click Save.
  6. Click   Prepare icon at the bottom of the page.
  7. Click Apply for the profile to be distributed to all the devices.

You have successfully established an insecure WiFi connection with the devices.

Create and Export MDM Profile

Follow the steps mentioned below to create and export MDM profile which needs to be pushed to the devices using Apple Configurator.

  1. Click MDM tab
  2. Under Settings select Enrollment
  3. Select Apple Configurator
  4. Specify a  Common User Name and Domain Name
  5. Export MDM profile by clicking   button.

You have successfully exported the MDM profile.

Push MDM profile through Configurator

Follow the steps mentioned below to push MDM profile to devices using Apple Configurator.

  1. Open Apple Configurator Tool and Click on Prepare icon

  2. Configure the Settings by providing the following details
  3. Name of the profile
  4. Specify the number of devices that needs to be configured
  5. Enable Supervise option
  6. Select the iOS version that needs to be installed on the devices
  7. Click on the check box to Erase the data in the device before installing the MDM profile
  8. Select the option from the drop down to Backup and Restore data on the mobile devices. If you wanted to back up data, ensure that you connect devices of the same type, such as iPhones or iPads.
  9. Connect the devices using USB port.
  10. Click Add button at the bottom of the profiles
  11. Select the MDM Profile and click Open
  12. Click Add button at the bottom of the profiles to add the  WiFi Profile that you have created.
  13. Click Save to store the changes
  14. Click   Prepare icon at the bottom of the page.
  15. Click Apply for the profile to be distributed to all the devices.

You can see that all the devices will get the MDM profile. Every device that is enrolled using configurator will be listed with the Common User name. Since managing mobile devices using a common user name cannot be feasible, you need to upload a .csv file in the bulk enrollment section with the details of the devices such as UDID, User name etc. Ensure that you uncheck the check box so that Enrollment request will not be sent to the users based on the uploaded csv. So, you can see that the enrolled devices will be renamed as per the details provided in the .csv.

Renaming Devices which has Common User Names:

Every device which has received the MDM profile through Apple Configurator, will contact the Desktop Central with the Common User name. You can see all these devices listed under Enrolled Devices with the same User Name. To rename those devices, you can follow the steps mentioned below.

  1. Click MDM tab
  2. Under Settings select Bulk Enrollment
  3. Create a .csv file with the device details like  USER_NAME,DOMAIN_NAME,EMAIL,PLATFORM,OWNED_BY,GROUP_NAME
  4. Browse to Upload the .csv file.
  5. Ensure that you un check the check box so that Enrollment request will not be sent to the users based on the uploaded csv.
  6. Click Import to complete the process.

You can see that all the devices will automatically be renamed based on the uploaded .csv file.

  • Note: You can change the Common User name by clicking the Edit Apple Configurator Profile under Apple Configurator tab. You can also reassign the devices to different users by selecting the device and clicking the  Change User option under Actions.  

  • Troubleshooting Tips

    1. 1. Users did not receive the Enrollment Request via Email

      1. Check whether you have configured the Mail Server settings

      2. Users are unable to access the URL sent via Email

      1. Desktop Central server is not running or not accessible by the users.
      2. Check if the firewall running in Desktop Central Server is blocking the communication (at port 8020/8383)
      3. If the users are outside LAN, they should be able to reach the Desktop Central Server via public IP. Check whether the NAT Settings is configured in Desktop Central (MDM --> NAT Settings)

      3. Users have installed the profile, but their devices are not listed in the Desktop Central

      1. The device is not able to reach APNs. Check whether your WiFi allows communication at port 5223
      2. If WiFi is disabled on the device, it should have access to Cellular Data network

    MDM Audit

    1. After the Devices are enrolled, you can also view the list of devices, enrolled as per the enrollment time and date. To audit the devices managed by Desktop Central follow the steps mentioned below:

    2. Click MDM Tab

    3. Select Enrollment under Settings

    4. Click  Audit.

      You can audit the managed mobile devices, by their associated Groups, enrollment time, date, device name, OS version, model name, product name etc.





    Copyright © 2005-2014, ZOHO Corp. All Rights Reserved.