Enroll an iOS device to DEP using iPhone

Starting iOS 16.0 Apple has opened up the option to enroll an iOS device into Device Enrollment Program (DEP) through another iOS device. Device Enrollment Program gives an organization the extra control to enforce stricter policies and also an option to disallow the users from removing the Scalefusion management from device.

This document walks you through how to enroll an iOS 16.0 (iPhone or iPad) or higher device to DEP program using another iPhone.

Before You Begin

1. Make sure that you have enabled Scalefusion to manage your DEP devices as described in Manage DEP Devices using Scalefusion.
2. Two iOS devices with iOS 16.0or above:
   1. Source device: The iPhone / iPad device using which you can make the other device DEP.
   2. Target device: The one to be enrolled under DEP.
3. Source device should have a Wi-fi connection and must have Apple Configurator installed and configured.
4. Admin should have access to Apple Business Manager account with Device Enrollment Manager role.
5. A valid Scalefusion Dashboard account.
6. Take a backup of your iOS device if required.

Procedure to enroll

Admin can add a new or erased iPhone or iPad.

1. Start up the iPhone or iPad to be enrolled under DEP. If the device is in use, please factory reset the device first.
2. Continue through the Setup Assistant. Stop on the screen where you see the Choose a Wi-Fi Networkpane.
   You must restart the iPhone or iPad if you go past the Choose a Wi-Fi Network pane.
3. Open Apple Configuratorapp on source device and bring it close to the target iPhone or iPad, then do one of the following:
   You should get a screen with an image on the target device
   1. Scan the image that appears in Setup Assistant (target device).
   2. Alternatively, tap Pair Manually on the Setup Assistant, then tap Pair Manuallyin Apple Configurator and enter the six-digit code that appears on target device, on the source device.
      If Setup Assistant doesn’t show the pairing pane on the iPhone or iPad you want to add, return to the Home Screen on your iPhone, then tap the Apple Configurator app again.
4. On the source device, login to the Apple Business Manager account on Apple configurator tool to continue the setup.
5. After logging in to ABM, the target device will start getting added to the ABM account.
6. You will get a confirmation message on the target device once the device is added successfully.
   You can open the Apple Configurator app on the source device and tap on the three horizontal lines at the bottom right of the screen. It will show the target device's information indicating that the device has been added successfully.
   
7. The serial number and other information about the iPhone or iPad will get uploaded to Apple Business Manager. Admin will have to login to ABM to check the device and assign the Scalefusion MDM server.
8. Once Scalefusion MDM server is assigned, tap on the Erase iPhone button to complete the process.
9. After the device is Erased, complete the device setup and the device will get enrolled into Scalefusion.
10. During setup, the target device will connect with ABM and fetch settings from there. Once done, it will show the Remote Management screen.
11. This completes the process of enrolling the device under DEP. On Scalefusion Dashboard, you can check the newly added device by going to Getting Started > Apple Setup > DEP.