Enroll any iOS 11 device to DEP using Apple Configurator

Starting iOS 11.0 Apple has opened up the option to enroll a normal iOS device into Device Enrollment Program. Device Enrollment Program gives an organization the extra control to enforce stricter policies and also an option to disallow the users from removing the Scalefusion management from device.

This document walks you through on how to enroll a normal iOS 11.0 or higher device to DEP program.

If you have purchased your device from a authorized DEP reseller then to learn how to set up Scalefusion to manage your DEP devices, please refer to our document here.

Before You Begin

1. Make sure that you have enabled Scalefusion to manage your DEP devices as described in Manage DEP Devices using Scalefusion.
2. Have access to an iOS device running iOS 11.0 or higher.
3. A Mac machine with Apple Configurator 2 installed.
4. A lightning USB cable.
5. Take a backup of your iOS device if required.
6. Have created a Wifi configuration on Scalefusion Dashboard. The Wifi config will be used during AC2 provisioning.

Video Guide:

Watch a quick video on how to enroll an iOS device to DEP.

Steps

On Your Mac Machine

1. Login to Scalefusion Dashboard. Navigate to Enrollment Configurations > QR Code Configurations.
2. Expand the QR Code that you want to enroll your devices into and Copy the URL under the iOS tab.
3. Launch Apple Configurator 2 on your Mac and connect the device using the cable.
4. If the device is connected and your Mac is Trusted, then you can see the device in Apple Configurator 2.
5. Right click on the device and click Prepare.
6. On the dialog that is shown please enable the following options,
   1. Choose Manual Configuration in the Prepare With field.
   2. Make sure to check:
      1. Add to Device Enrollment Program.
      2. Activate and Complete Enrollment.
      3. Allow devices to pair with other computers.
   3. Click Next.
7. In this screen you will be asked the details of the MDM server,
   1. You can choose from your existing MDM servers if you had created one and click Next OR
   2. Select New Server from the drop-down and click Next
      1. In the next screen, enter a Name for the server ex: Scalefusion and paste the URL that you copied from Scalefusion Dashboard.
8. At this point you will be asked for your Apple credentials for DEP program. Please enter the credentials that you use for Apple Business Manager and Click Sign In.
9. Once the Sign In succeeds you will be asked to choose a Supervisioning identity. Click Next.
10. You can ignore the step related to entering credentials for MDM server and click Next.
11. On the last screen click Prepare.
12. You will shown a warning that the device will be erased. Click Erase.
13. This will start the enrollment process on the device and the device might reboot a couple of times during the setup.
14. Once the device starts, configure a Wi-Fi and click Next on the device.
15. At this point device should show the Remote Management screen so that you can complete enrolling the device to Scalefusion Dashboard.

This would complete part one of the process. The next part involves assigning this device to Scalefusion at https://business.apple.com so that in the future when the device is hard reset it can automatically enroll to Scalefusion Dashboard.

On the Apple Business Manager Portal

1. Log in to your Apple Business Manager portal at https://business.apple.com 
2. Navigate to the Devices section.
3. Type in the Serial number of the device that you just enrolled.
4. Click on the Edit MDM server option.
5. Select the DEP Server that has been created for Scalefusion from the list of servers and click OK.
6. Now Login to Scalefusion Dashboard and navigate to Getting Started > Apple Setup > DEP.
7. Click on the blue arrow next to iOS Devices Synced.
8. In this screen click on SYNC NOW.
9. You should see the newly assigned device in your Scalefusion Dashboard.