Enrollment Configuration for Employee Owned (BYOD) Macs

QR Code or Device Enrollment Configurations are a quick and easy way to invite your users to enroll their personal devices. This lets you create multiple configurations with different Device Profiles for various departments in your organization and easily invite and track enrollments.

Before you Begin

1. Make sure you completed the APNs upload part as per the Setting Up APNs guide.
2. Make sure you have at least one Device Profile as per the Create a Mac Device Profile guide.
3. Make sure that you have added Users that you want to Invite.

Steps

Creating a QR Code Configuration

1. Once you are logged into Dashboard, navigate to Enrollment Configurations > QR Code Configurations
2. Click on CREATE to open the QR Code configuration wizard.
3. Under the Basic tab, provide the following details, and click NEXT
   1. Configuration Name: A name for this configuration
   2. Enrollment Type: Choose Personal (BYOD) if you want to invite users.
   3. Device Naming Convention: Choose a naming convention that will be used to auto-generate device names when the devices are enrolled.
      1. Use OS Name: If this is selected, then the device names are pre-fixed with the OS name.
      2. Set Device Name on iOS & macOS devices: Users can choose to Set the device name on the device during enrollment. This flag is selected by default.
         Device Name is based on the naming convention that is generated on the Dashboard
         
4. In the Group/Profile tab select a Mac Profile and click NEXT
5. The Optional Settings section helps you set a default license for the devices enrolled using this configuration. This is an optional section and can be left blank. If the selected licenses have no free slots or this option is left blank, then the next available license is used to enroll the device.
   Enrollment Network Settings are configured to speed up the enrollment process when you are enrolling via 6-times tap and scan a QR.
   
6. Once the configuration is saved, it will appear in the list. A configuration when expanded, has the following options,
   1. Invite Users: Use this option to start inviting users that can enroll their devices.
   2. Email: Use this option to start inviting users who can enroll their devices.
   3. Edit: It helps you in editing the Configuration. Note that editing won’t impact the devices that are already enrolled.
   4. Deactivate: If you no longer wish to use this configuration or think it is compromised, then you can deactivate the config. Once Deactivated, the configuration can be deleted.
      Unlike QR Code configurations for Company Owned devices, there is no static QR Code in this case. The QR Code and/or Enrollment URLs are generated based on the invites.

Invite Users to Enroll their Devices

Now that you have created a configuration let us go ahead and invite users to enroll their devices.

1. Expand the QR Code and click on Invite Users to open the user invite wizard.
2. The first section in the User Invite wizard is to Configure Email. Once you have configured the email content, click NEXT
   1. Choose Platforms: If this configuration can be used for multiple platforms/enroll, then you can choose the platform. Based on this, the content of the email will be created.
   2. Edit the Welcome and Thank You Note: You can edit the welcome and thank you note by clicking on the dotted sections.
   3. Preview: Preview the Email that will be sent to the user
3. The next section is to Select Users, where you can select the users to whom the enrollment email should be sent. Click SEND once you have selected the users.
   If you had not added/imported the users earlier, you can add the users from this screen by using the ADD USER option.
4. If the email is valid, the users will get an email as shown below,
   Please ask your users/employees to check their Spam folder if they don't see the email in their Inbox.

Now that you have invited the user to enroll their devices, please refer to How to Enroll User/Employee Owned Devices to enroll a device.

Frequently Asked Questions

Question: Can we limit the users to enroll only one Device or a Mac with a specific Serial Number?

Answer: Yes. You can control how many devices a user can enroll or what are Serial numbers allowed to enroll by navigating to the Device & User Management > User Management and editing the user properties, as shown below,

Question: Do our users see the following errors while enrolling the devices?

Answer: Make sure that you have not limited the user to enroll only a specific number of devices. You can manage the number of devices that a user can enroll under Device & User Management > User Management. Edit the user who has reported that issue and make sure that they are allowed to enroll the required number of personal devices as shown below,

Question: Our users see an error that says "Profile Failed to Install" once they try to install the profile from the User invite.

Answer: This can happen if you have restricted the user to enrolling a Mac with a specific serial number and the serial number of the Mac being enrolled does not match.