Enroll iOS devices

Enrolling Devices is the first stage in managing a mobile device, this document will explain you in detail about various steps involved in enrolling the device.

  • Enrolling Devices

    Enroll Additional devices for same user

    Bulk Enrollment

    Self Enrollment

    Enrollment Process on iOS devices

    Distributing MDM App to Enrolled Devices

    Removing an Enrolled Device

    Troubleshooting Tips

  • Follow the steps mentioned below to enroll the devices.

    Enrolling Devices

    1. Click  MDM tab on the Desktop Central Console

    2. Under Settings click on Enrollment

    3. Click  Enroll Device and fill in the appropriate information

    4. Domain Name : Choose the Domain Name from the drop down, if you do not have any domain name, select  Default Workgroup

    5. User Name- Enter the user name of the device that needs to be enrolled.

    6. Email address :It is mandatory to  enter the email address of the user who will receive the enrollment request.

    7. Platform: Specify the platform from the drop down menu, as iOS . You can also configure the email template which will be sent as enrollment request.

    8. Owned By : Owner of the device either Corporate or Personal

    9. Click Enroll to enroll the device.

    10. Assign to Group : Specify the group to which the device should be added. If you select an existing group from the drop down, then the newly added device will automatically get all the apps and profiles which were already distributed to the group. By doing so you can automate the process of imposing the minimum required restrictions and apps to all the newly added devices.

      If you add a new group name, then a new group will be created and the device will be added to it.

    Ensure that you configure your Proxy settings, and the mail server settings, so that you the user can receive the email with the authentication passcode.

    After enrollment Users will receive an email with the  enrollment instructions and the link to enroll the devices. Based on the authentication policy defined for enrollment, users will be receiving the authentication passcode.  Users need to manually install the MDM profile by clicking on the enrollment request. All enrolled devices will be listed in the Devices Tab in the Desktop Central MDM console under Groups and Devices.

    Enroll Additional devices for same user

    You can enroll multiple devices for the same user. In case a user has more than one mobile device that needs to be managed,  you can enroll those devices by following the steps mentioned below;

    1. Click MDM Tab

    2. Under Settings choose Enrollment

    3. Under Enrollment tab choose the User Name to whom you wanted to enroll the additional device

    4. Under Actions click   button

    5. Specify the Platform as iOS or Android

    6. Specify the  Owned By type as Corporate or Personal and click Enroll

    The mail to enroll additional device would be sent to the specified user.

    Bulk Enrollment

    This option facilitates you to enroll many devices at a same time. You can simply create a csv file with the User Name, Domain Name, Email, Platform and Owned by details and upload the same. Multiple entries should be in separate lines. Refer the below mentioned csv file for example,

    Sample CSV Format

         Note : 
         1. The CSV file should contain the following fields: User Name, Domain Name, Email Address, Platform Type, Owned By, Group Name and UDID.
         2. UDID is applicable only for iOS devices
         3. The fields User Name, Email Address and Platform Type are mandatory. All the other fields are optional. If not provided, default values will be taken.

         4. The default values for various non-mandatory fields are: 
                   Domain Name -- MDM
                   Owned By -- Corporate
                   Group Name -- Default Group for given Owned By & Platform Type.
         5. The first line of the CSV is the column header and the columns can be in any order.
         6. Blank column values should be comma separated.
         7. If the column value contains comma, it should be specified within quotes.

    Follow the steps mentioned below, to enroll devices through Bulk Enrollment.

    1. Click  MDM tab on the Desktop Central Console

    2. Under Settings Click on Enrollment

    3. Click  Bulk Enrollment . A window opens, click Browse to upload the created CSV file and Import the same.

      Enrollment mail will be sent to all the users listed in the csv file.

    Enrollment Process on iOS devices

    The users, upon receiving the enrollment requests, can enroll their device as below:

    1. Users should note down the Unique Passcode. Passcode is case sensitive.

    2. Clicking the link in the email will open a window and prompt for the passcode

    3. User should specify the passcode received in the email and click Continue. After validating the passcode, a confirmation screen will appear. Click Continue.

    4. Click Install to install the profile

    5. The profile will be installed.

    6. Click Done to view the enrollment status

      The device enrollment process has been successfully completed and the device will be listed in Desktop Central.

    Once the device enrollment is completed, the device will be scanned and the users will receive an App Catalog and MDM Profile . All the Apps that are distributed by Desktop Central will be listed in the App Catalog.  Users can choose the App and install them by clicking on it. Incase of App store App, by clicking on the App users will be prompted to enter their Apple ID and password and the App will be downloaded from the App store. MDM profile is the profile used by Desktop Central to manage the mobile device, if the user removes the MDM Profile, then all the Apps that has been installed  through Desktop Central and the policies applied will be reverted.

    Distributing MDM App to Enrolled Devices

    When ME MDM App is installed on the device, you get advanced control over the device. Using ME MDM App helps administrators to identify Jail broken devices and also helps in location tracking. You can view where the device is geographically located by using this App. This App can be distributed to all the managed devices by following the steps mentioned below:

    1. Select MDM tab

    2. Click Agent Settings  under Settings

    3. Enable the check box  to automate the distribution of MDM App to all the managed iOS devices.

    You have successfully distributed Apps to groups. The distributed Apps will be listed in the App Catalog of the user's mobile device. Users can click on it and install the App. If this App is installed on a device running iOS 7 or later versions, then the App will automatically fetch Server Name, Port number and Enrollment ID. On the devices running iOS versions lower than 7.0, users should provide the Server Name, Port number and Enrollment ID which was sent to them via email. After installing the MDM App, you can see that the App catalog will be moved inside the App automatically.  You will able to track the geographic location of the device by configuring the location tracking settings

    Removing an Enrolled Device

    1. Go to Settings -> Enrollment

    2. Click on Enrollment tab

    3. Click Search button and search for the device by using its known properties( user name, device name etc)

    4. Click on Action button and select Remove Device

    5. In the confirm box that appears, click OK.

    Removing the device will remove all the profiles and apps associated with the device. ME MDM App will also be removed if it is installed through MDM.

    Troubleshooting Tips

    1. Users did not receive the Enrollment Request via Email

    1. Check whether you have configured the Mail Server settings

    2. Users are unable to access the URL sent via Email

    1. Desktop Central server is not running or not accessible by the users.

    2. Check if the firewall running in Desktop Central Server is blocking the communication (at port 8020/8383)

    3. If the users are outside LAN, they should be able to reach the Desktop Central Server via public IP. Check whether the NAT Settings is configured in Desktop Central (MDM --> NAT Settings)

    3. Users have installed the profile, but their devices are not listed in the Desktop Central

    1. The device is not able to reach APNs. Check whether your WiFi allows communication at port 5223

    2. If WiFi is disabled on the device, it should have access to Cellular Data network


    See Also: Creating a Group, Creating Profiles, App Management, Profile Management, Asset Management, Security Management     
    Copyright © 2005-2015, ZOHO Corp. All Rights Reserved.