# Apple Business Manager Enrollment

**Last Updated On**: 13 Jul 2026  
**19 minutes read**

## Pre-requisites for Automated Device Enrollment (ABM/ASM)

Before you can start enrolling devices through Apple Business/School Manager (ABM/ASM), ensure the following prerequisites are met:

- **Availability of ABM/ASM in Your Country:** Confirm that Apple Business Manager is available in your [country or region](https://support.apple.com/en-in/102867). ABM’s features and functionalities might vary based on location.
- **ABM/ASM Account:** You must have an Apple Business/School Manager (ABM/ASM) account. If you don’t have one, you can create one [here](https://business.apple.com/signup/). To learn more, visit:
  - [ABM User Guide](https://support.apple.com/en-gb/guide/business/welcome/web)
  - [ABM Sign Up Guide](https://support.apple.com/en-gb/guide/business/axm402206497/web)
  - [ASM User Guide](https://support.apple.com/en-in/guide/apple-school-manager/welcome/web)
  - [ASM Sign Up Guide](https://support.apple.com/en-in/guide/apple-school-manager/axm402206497/web)
- **Device Purchase:** Devices must be bought directly from [authorized resellers](https://support.apple.com/en-us/118207), or add devices manually using [Apple Configurator](https://www.manageengine.com/mobile-device-management/help/enrollment/enroll_ios_devices_using_apple_configurator.html).  
  If your devices were not purchased directly from Apple or its authorized resellers, you can still add them to Apple Business Manager, provided they are running [iOS 16.0 or later versions](https://www.manageengine.com/mobile-device-management/how-to/add-macs-to-abm-with-ios-configurator.html). For devices running iOS 15.0 or earlier, visit our [Add devices to ABM/ASM](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-any-ios-device-abm-via-apple-configurator.html) guide.  
  To reset a Mac device, follow:
  1. [Mac with Apple Silicon](https://support.apple.com/en-gb/102506)
  2. [Intel-based Mac](https://support.apple.com/en-us/102639)
- **Required Role for ABM/ASM Accounts:** Ensure you hold the appropriate user role within Apple Business Manager (ABM) or Apple School Manager (ASM) to manage device enrollment:
  - **Apple Business Manager:** Administrator or Device Enrollment Manager
  - **Apple School Manager:** Administrator, Site Manager, or Device Enrollment Manager
- **ABM synchronization** occurs through a series of requests sent from MDM. ABM server monitors these requests and checks for IP changes. If you are using a load balancer, synchronization may fail. To ensure successful ABM sync, allow the URL `mdmenrollment.apple.com` to pass through using the same outgoing IP address.

## Integrate Device Management Services with ABM Portal

1. **Download MDM Public Key:**  
   On the MDM Console, navigate to **Enrollment → Apple → Apple Enrollment (ABM/ASM)**. Then, choose either "Enroll devices for business" or "Enroll devices for schools," depending on your needs.

   ![MDM console at Enrollment > Apple > Apple Enrollment (ABM/ASM) with the business and school options](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm1.webp)

   Download the **MDM Public Key (MEMDMCertificate.pem)**, which needs to be uploaded to the ABM portal for the integration process.

   ![Downloading the MDM public key (MEMDMCertificate.pem) from the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/downloadpublickey.webp)

2. **Create Device Management Services in ABM/ASM by uploading the MDM public key:**  
   Log in to the [Apple Business Manager](https://business.apple.com/) portal using your organization's managed Apple ID. Navigate to **Devices > Management**. Select an existing Device Management Service or create a new one by clicking **Add**.  
   Enter a Device Management Services Name that reflects your organization’s locations or departments. Upload the MEMDM Public Key and click **Next** to complete the process.

   ![Creating a Device Management Service in the ABM portal](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abmupdate.webp)

   ![Uploading the MDM public key to the Device Management Service in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abmupdate1.webp)

3. Select your device management service and click **Download Token**. This token must be uploaded to the MDM console to establish a connection.

   ![Downloading the server token from the ABM Device Management Service](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abmdownloadstoken.webp)

4. **Upload the Server Token in MDM:**  
   In the MDM console, click **Generate Server Token**, then **Next**. Upload the downloaded server token.  

   **Note:** The server token is valid for one year and must be renewed and re-uploaded annually. Enter your IT team’s email addresses to receive expiration reminders.

   ![Uploading the ABM server token in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/uploadstoken.webp)

5. **Device Activation Settings:**  
   When enrolling new or factory-reset devices through ABM, the configured settings will be automatically applied upon activation. These settings can be configured immediately or later.

   ![Configuring Device Activation Settings in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-device-account-settings.webp)

   ![Additional Device Activation Settings options in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-device-account-settings1.webp)

   For detailed configuration steps, visit the [Device Activation Settings](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_settings.html) page.

6. **Create the server:**  
   After entering the required configuration details, click **Create** to add the ABM server to the MDM console. A confirmation message will appear.

   You can access three tabs:
   - **Devices Tab:** View devices assigned to this MDM server.
   - **Servers Tab:** Add or renew MDM server tokens.
   - **Settings:** Choose the sync schedule for new devices.

   ![ABM server added in the MDM console, showing the Devices, Servers, and Settings tabs](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm4.webp)

   For more information on assigning devices to the required server token in ABM or setting a default server, click [here](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_user_assignment.html).

**Note:** For efficient management of user-activated devices, including Mac and shared devices, it is advisable to set up a dedicated server specifically for these devices.

## Add Devices to Apple Business/School Manager (ABM/ASM)

Adding devices to ABM/ASM is crucial for managing them effectively through the MDM Console.

### Methods to Add Devices

#### Adding Reseller Details to the ABM/ASM Portal

- Log in to your Apple Business Manager portal.

  **Note:** Only users with Administrator or Device Enrollment Manager roles can add reseller details in ABM.

- Navigate to **Devices > Inventory** and click **Add**.

  ![Adding reseller details under Devices > Inventory in the ABM portal](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-add-reseller.webp)

- Enter your Apple Customer Numbers and ABM/DEP Reseller IDs.

  ![Entering Apple Customer Numbers and ABM/DEP Reseller IDs](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-add-reseller1.webp)

- Click **Add** to complete the process.

#### Manually Assign Devices to the Device Management Services in ABM/ASM Portal

If devices were purchased before setting up Device Management Services:

- Log in to your Apple Business/School Manager portal.
- Navigate to **Devices > Inventory** and select devices.
- Click **Assign Device Management**.

  ![Selecting Assign Device Management for the chosen devices in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-add-device1.webp)

- Choose the appropriate Device Management Service.

  ![Choosing the Device Management Service from the dropdown to assign devices](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-add-device2.webp)

- Click **Continue**, confirm the assignment, and click **Close**.
- Go to **Devices > Management** to view assigned devices.

  ![Assigned devices listed under Devices > Management in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-devices.webp)

The selected devices will now be added to the Device Management Services.

**Note:** To add devices purchased from other sources:

- [Add iOS/iPadOS devices](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-any-ios-device-abm-via-apple-configurator.html)
- [Add macOS devices](https://www.manageengine.com/mobile-device-management/how-to/add-macs-to-abm-with-ios-configurator.html)
- [Add Apple TV devices](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-apple-tv-abm-using-apple-configurator.html)

#### Automatic Device Assignment to Default Server in ABM/ASM

When new devices are purchased or added via Apple Configurator, they can be automatically assigned to a default server.

- Log in to the [Apple Business Manager](https://business.apple.com/) portal.
- Navigate to **Devices > Management**.
- Click **Default Device Assignment** and select the appropriate default server.

  ![Selecting device-specific default servers under Default Device Assignment](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-default-server1.webp)

- Click **Save** to ensure automatic assignment.

  ![Saving the default device assignment configuration in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm-default-server2.webp)

## Sync Devices in MDM

Syncing devices between ABM/ASM and the MDM console ensures device information is up-to-date. MDM automatically syncs every 24 hours, but you can schedule or manually initiate syncs.

### Steps to Sync Devices

- Navigate to **Enrollment > Apple > Apple Enrollment (ABM/ASM)**.
- Click **Edit Sync Time** or go to the **Settings** tab and enter your preferred sync time.
- Click the check-mark icon to save.

**Example:** To sync newly purchased devices before 8 AM, configure the sync frequency accordingly. MDM will perform the scheduled sync in addition to the regular 24-hour sync.

- To manually sync, click **Sync Now**.

  ![Editing the sync schedule and using Sync Now in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-management-msp/help/mobile-device-management/abm_sync_time.webp)

## MDM Server Token Renewals

The MDM Server Token is valid for one year and must be renewed to continue enrolling devices through ABM/ASM. Renew it ahead of expiration to avoid interruptions.

For detailed steps, refer to the [ABM/ASM Server Token Renewal](https://www.manageengine.com/mobile-device-management/how-to/renew-dep-server-token.html) guide.

## Troubleshooting Tips

For detailed troubleshooting steps on common enrollment or configuration issues, visit the [Troubleshooting Guide](https://www.manageengine.com/mobile-device-management/help/enrollment/troubleshooting_tips_ABM.html).

## What's Next?

### Device Activation by Admin and End User

Learn how administrators and end users can activate devices after enrollment in the [Device Activation](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_user_assignment.html#Automated-Device-Activation) guide.

### Configure/Modify Device Activation Settings

For detailed instructions, visit the [Device Activation Settings guide](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_settings.html).

### Create and Manage Groups

Refer to the [Creating Groups guide](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_creating_groups.html) for step-by-step instructions.

### Create and Manage Profiles

To create profiles for managed devices, visit the [Profile Creation](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_creating_profiles.html) page.

## FAQs

### 1. How do I fix an iPhone enrollment status stuck on "Awaiting Device Activation" in ABM?

The "Awaiting Device Activation" status is expected for devices assigned to Automated Device Enrollment via ABM/ASM. This method requires two steps, which can be completed in any order:

1. **Device activation:** Boot up or activate the device. It contacts Apple’s enrollment services and automatically enrolls into MDM.
2. **Enrollment completion:** Assign user or device group details in the MDM console.

Once both steps are complete, the device is successfully enrolled.

- **Step 1 pending:** Status remains "Awaiting Device Activation" until powered on.
- **Step 2 complete:** Enrollment finishes immediately upon activation.
- **Step 2 pending:** Device enrolls on activation but remains pending until assignment is completed.