# Apple Business Manager Enrollment

**Last Updated On**: 13 Jul 2026  
**19 minutes read**

## Pre-requisites for Automated Device Enrollment (ABM/ASM)

Before you can start enrolling devices through Apple Business/School Manager (ABM/ASM), ensure the following prerequisites are met:

- **Availability of ABM/ASM in Your Country:** Confirm that Apple Business Manager is available in your [country or region](https://support.apple.com/en-in/102867). ABM’s features and functionalities might vary based on location.
- **ABM/ASM Account:** You must have an Apple Business/School Manager (ABM/ASM) account. If you don’t have one, you can create one [here](https://business.apple.com/signup/). To learn more, visit:
  - [ABM User Guide](https://support.apple.com/en-gb/guide/business/welcome/web)
  - [ABM Sign Up Guide](https://support.apple.com/en-gb/guide/business/axm402206497/web)
  - [ASM User Guide](https://support.apple.com/en-in/guide/apple-school-manager/welcome/web)
  - [ASM Sign Up Guide](https://support.apple.com/en-in/guide/apple-school-manager/axm402206497/web)
- **Device Purchase:** Devices must be bought directly from [authorized resellers](https://support.apple.com/en-us/118207), or added manually using [Apple Configurator](https://www.manageengine.com/mobile-device-management/help/enrollment/enroll_ios_devices_using_apple_configurator.html).  
  If your devices were not purchased directly from Apple or its authorized resellers, you can still add them to Apple Business Manager, provided they are running [iOS 16.0 or later versions](https://www.manageengine.com/mobile-device-management/how-to/add-macs-to-abm-with-ios-configurator.html). For devices running iOS 15.0 or earlier, visit our [Add devices to ABM/ASM](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-any-ios-device-abm-via-apple-configurator.html) guide.  
  To reset a Mac device:
  1. [Mac with Apple Silicon](https://support.apple.com/en-gb/102506)
  2. [Intel-based Mac](https://support.apple.com/en-us/102639)
- **Required Role for ABM/ASM Accounts:** Ensure you hold the appropriate user role within ABM or ASM:
  - **Apple Business Manager:** Administrator or Device Enrollment Manager
  - **Apple School Manager:** Administrator, Site Manager, or Device Enrollment Manager
- **ABM Synchronization:** ABM synchronization occurs through a series of requests sent from MDM. ABM servers monitor these requests and check for IP changes. If you are using a load balancer, synchronization may fail. To ensure successful ABM sync, allow the URL `mdmenrollment.apple.com` to pass through using the same outgoing IP address.

<iframe src="https://www.youtube-nocookie.com/embed/qrQyL5-SWFg?controls=0"></iframe>

## Integrate Device Management Services with ABM Portal

1. **Download MDM Public Key:**  
   On the MDM Console, navigate to **Enrollment → Apple → Apple Enrollment (ABM/ASM)**. Choose either "Enroll devices for business" or "Enroll devices for schools."

   ![MDM console at Enrollment > Apple > Apple Enrollment (ABM/ASM) with the business and school options](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm1.webp)

   Download the **MDM Public Key (MEMDMCertificate.pem)** to upload to the ABM portal.

   ![Downloading the MDM public key (MEMDMCertificate.pem) from the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/downloadpublickey.webp)

2. **Create Device Management Services in ABM/ASM:**  
   Log in to the [Apple Business Manager](https://business.apple.com/) portal. Navigate to **Devices > Management**. Select an existing service or click **Add** to create a new server.  
   Enter a recognizable Device Management Services Name. Upload the MEMDM Public Key and click **Next**.

   ![Creating a Device Management Service in the ABM portal](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abmupdate.webp)

   ![Uploading the MDM public key to the Device Management Service in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abmupdate1.webp)

3. Select the device management service and click **Download Token**.

   ![Downloading the server token from the ABM Device Management Service](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abmdownloadstoken.webp)

4. **Upload the Server Token in MDM:**  
   In the MDM console, click **Generate Server Token** → **Next** → upload the downloaded token.  
   The server token is valid for one year and must be renewed annually. Enter your IT team’s email addresses for renewal reminders.

   ![Uploading the ABM server token in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/uploadstoken.webp)

5. **Device Activation Settings:**  
   Configure settings to be automatically applied when devices are activated.

   ![Configuring Device Activation Settings in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-device-account-settings.webp)

   ![Additional Device Activation Settings options in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-device-account-settings1.webp)

   For more details, visit the [Device Activation Settings](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_settings.html) page.

6. **Create the Server:**  
   Click **Create**. A confirmation message will appear once added.

   Available tabs:
   - **Devices Tab:** View devices assigned to this MDM server.
   - **Servers Tab:** Add or renew multiple server tokens.
   - **Settings:** Choose the sync schedule.

   ![ABM server added in the MDM console, showing the Devices, Servers, and Settings tabs](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm4.webp)

   Assign devices to the designated MDM server from ABM. Learn more [here](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_user_assignment.html).

**Note:**  
For efficient management of user-activated devices, including Mac and shared devices, set up a dedicated server.

## Add Devices to Apple Business/School Manager (ABM/ASM)

Adding devices to ABM/ASM is essential for effective MDM management.

### Methods to Add Devices

#### Adding Reseller Details to the ABM/ASM Portal

- Log in to the ABM portal.  
  **Note:** Only Administrators or Device Enrollment Managers can add reseller details.
- Navigate to **Devices > Inventory** → **Add**.

  ![Adding reseller details under Devices > Inventory in the ABM portal](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-add-reseller.webp)

- Enter your Apple Customer Numbers and ABM/DEP Reseller IDs.

  ![Entering Apple Customer Numbers and ABM/DEP Reseller IDs](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-add-reseller1.webp)

- Click **Add**.

#### Manually Assign Devices to Device Management Services

- Log in to ABM/ASM.
- Navigate to **Devices > Inventory**, select devices.
- Click **Assign Device Management**.

  ![Selecting Assign Device Management for the chosen devices in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-add-device1.webp)

- Choose the Device Management Service from the dropdown.

  ![Choosing the Device Management Service from the dropdown to assign devices](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-add-device2.webp)

- Click **Continue** and confirm.
- View assigned devices under **Devices > Management**.

  ![Assigned devices listed under Devices > Management in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-devices.webp)

To add devices from non-authorized sources:

- [Add iOS/iPadOS devices](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-any-ios-device-abm-via-apple-configurator.html)
- [Add macOS devices](https://www.manageengine.com/mobile-device-management/how-to/add-macs-to-abm-with-ios-configurator.html)
- [Add Apple TV devices](https://www.manageengine.com/mobile-device-management/how-to/mdm-enroll-apple-tv-abm-using-apple-configurator.html)

#### Automatic Device Assignment to Default Server in ABM/ASM

- Log in to the [Apple Business Manager](https://business.apple.com/) portal.
- Navigate to **Devices > Management**.
- Click **Default Device Assignment** and choose device-specific default servers.

  ![Selecting device-specific default servers under Default Device Assignment](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-default-server1.webp)

- Click **Save**.

  ![Saving the default device assignment configuration in ABM](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm-default-server2.webp)

## Sync Devices in MDM

Syncing ensures device information between ABM/ASM and MDM remains up-to-date. MDM automatically syncs every 24 hours, but manual or scheduled syncs are also available.

### Steps to Sync Devices

- Navigate to **Enrollment > Apple > Apple Enrollment (ABM/ASM)**.
- Click **Edit Sync Time** or go to the **Settings** tab.
- Enter your preferred sync time and save.
- To manually sync, click **Sync Now**.

  ![Editing the sync schedule and using Sync Now in the MDM console](https://cdn.manageengine.com/sites/meweb/images/desktop-central/help/mobile-device-management/abm_sync_time.webp)

## MDM Server Token Renewals

The MDM Server Token is valid for one year and must be renewed to continue device enrollment. Refer to the [ABM/ASM Server Token Renewal Guide](https://www.manageengine.com/mobile-device-management/how-to/renew-dep-server-token.html) for detailed steps.

## Troubleshooting Tips

For common issues during enrollment or configuration, visit the [Troubleshooting Guide](https://www.manageengine.com/mobile-device-management/help/enrollment/troubleshooting_tips_ABM.html).

## What's Next?

### Device Activation by Admin and End User

Learn how devices are activated after enrollment in the [Device Activation Guide](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_user_assignment.html#Automated-Device-Activation).

### Configure/Modify Device Activation Settings

Visit the [Device Activation Settings guide](https://www.manageengine.com/mobile-device-management/help/enrollment/abm_device_activation_settings.html).

### Create and Manage Groups

See the [Creating Groups guide](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_creating_groups.html).

### Create and Manage Profiles

Refer to the [Profile Creation Page](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_creating_profiles.html).

## FAQs

### 1. How do I fix an iPhone enrollment status stuck on "Awaiting Device Activation" in ABM?

The "Awaiting Device Activation" status is expected for devices assigned to Automated Device Enrollment via ABM/ASM. This method requires two steps:

1. **Device activation:** Power on or activate the device. It contacts Apple's enrollment services and enrolls into MDM.
2. **Enrollment completion:** Assign user or device group details in the MDM console.

Scenarios:

- **Step 1 pending:** Status remains "Awaiting Device Activation" until powered on.
- **Step 2 complete:** Enrollment completes immediately upon activation.
- **Step 2 pending:** Device enrolls upon activation but remains pending until user/group assignment is completed.