Enrollment Configurations for Company Owned Macs

Device Enrollment Configurations are a quick and easy way to enroll your Mac devices. By creating a configuration, you can choose the default Group or Profile and a naming convention for the devices that are enrolled using this configuration.

For each Kiosk/Corporate enrollment configuration, there is one unique URL generated, which can be used on all the Mac devices that you want to enroll using this configuration. You can create as many enrollment configurations as you want depending on the number of Device Profiles that you have.

Before you Start

1. Make sure you completed the APNs upload part as per the Setting Up APNs guide.
2. Make sure you have at least one Mac Device Profile as described in Create a Mac Device Profile.

Steps

1. Login to Scalefusion Dashboard.
2. Click on Enrollment Configurations > QR Code Configurations
3. Click on CREATE to launch the configuration creator wizard.
4. Under the Basic section, fill in the relevant details, and click NEXTonce ready.
   1. Name: Give a Name for this configuration
   2. Enrollment Type: Choose Kiosk/Agent
   3. Choose Enrollment Method: Select Enrollment Method from of the following:
      1. Userless Enrollment (Selected by default): On selecting this option, no user authentication will be asked for at the time of enrollment.
      2. User Authenticated Enrollment: Selecting this will ask for user authentication at the time of enrollment, associating the user with the device. To enable User Authenticated Enrollment, the following criteria should be fulfilled:
         1. The account should have some users added or imported.
         2. The account should have Organization Info and Terms of Services configured.
   4. Device Naming: Choose a Device Naming convention.
      1. Use OS Name: If this is selected, then the device names are pre-fixed with the OS name. In the case of macOS, they are prefixed with Mac
      2. Set Device Name on iOS & macOS devices: Users can choose to Set the device name on the device during enrollment. This flag is selected by default.
         Device Name is based on a naming convention that is generated on the Dashboard
         
5. Under the Group/Profile section, select a macOS Device Profile or a Device Group with macOS Device Profile. This will ensure that the devices enrolled using this configuration will be applied policies as per the Device Profile associated here. Apply Enrollment Rules: If any enrollment rules are defined in Global settings, they get applied when a device is enrolled using this configuration. Disable this setting to skip applying the rules for enrollment using this configuration. Click NEXT once done.
6. Device Configuration:Following are the additional settings that can be configured under this:
   1. Allow Users to Enter a Name for Device: If this is selected, then users are allowed to set the device name from the device when they enroll it.
   2. Allow Users to Scan a QR or Enter Group Enrollment Code to Complete Enrollment: Enabling this will show a screen at the end of enrollment that will allow users to scan a QR Code or enter a Group Enrollment code to move the devices to their respective group before they start using the device. When the devices move to a specific group, the device profile of the group gets applied to the devices.
   3. Allow Users to Enter Values for Custom Properties: When this flag is selected, users can set values for the custom fields (from the device at the time of enrollment) that are defined through Custom Properties. For each custom field following can also be configured from here:
      1. Allow: Shows or hides the custom field to the user
      2. Required: Select if the field is optional or required.
         
7. Optional Settings: These settings are for Android devices. For Mac, these can be skipped. Click Save 
8. To enroll a Mac device, you would need the enrollment URL. To get the enrollment URL, click on the configuration from the list, and click on the tab Mac which displays the Enrollment URL and Enrollment Code.
   
9. The following actions and options are available for macOS enrollment configuration:
   
   1. Download: Use this option to download the configuration on your system
   2. Email: Use this option to have the configuration and enrollment details emailed to your Dashboard account Email.
   3. Edit: Use this option to edit the enrollment configuration.
   4. Deactivate: Use this option to deactivate the enrollment configuration.
   5. Rotate: Use this option to rotate the enrollment URL and QR Code in case you think the URL is compromised. Note that no action is taken on the devices that are already enrolled.

Once you have created enrollment configurations, head over to our Enrolling a Company Owned Mac Device guide to learn how to enroll a device.