Procedure

1. Log on to the Mobile Security administration web console.
2. Click Devices on the menu bar.
   The Devices screen appears.
3. Click the Device Enrollment Program tab.
4. Click Settings.
5. Click the Download link before Public Key to download the public key to the local computer from Mobile Security Management Server.
6. Click the Apple Deployment Programs link before Deployment.
   The Apple Deployment Programs web portal opens in the Internet web browser.
7. Sign in to your Device Enrollment Program account and create a new MDM server using the public key you downloaded from the Mobile Security Management Server.
8. On the MDM server, generate an access token and save the token file to a suitable location, and then assign mobile devices for enrollment to the MDM server.
9. Upload the token file you generated through the Apple Deployment Programs web portal to the Mobile Security Management Server. Wait until the upload completes.
   After the upload completes, the Device Enrollment Program Settings screen appears.
10. Under the Device Enrollment Program Detail section, configure the following setup profile settings for mobile devices.
    • Profile name: a name for the setup profile displayed on the mobile device.
    • Require supervision: to place the mobile devices enrolled through the Device Enrollment Program to the supervised mode.
    • Removable configuration: to allow users to remove the device management configuration from devices enrolled through the Device Enrollment Program.
    • Allow pairing: to enable devices enrolled through the Device Enrollment Program to be managed through Apple tools such as iTunes and Apple Configurator.
    • Mandatory configuration: to prevent users from skipping the Mobile Security enrollment step in the device activation process.
    • Business unit: the name of the department to which the mobile device is assigned to.
    • Unique service ID: if you have multiple Mobile Security deployments, enter in the Unique service ID box a name that uniquely identifies the deployment you are configuring.
    • Support phone number: the phone number for users to call for assistance.
    • Required setup items: the setup items that are required for the users to configure. By default, all the setup items are required. If you disable any of these items, the users will be able to skip that item during setup.
11. Under the Enterprise Mobile Security Agent License section, select the available option to assign Enterprise Mobile Security agent licenses to mobile devices. If Enterprise Mobile Security application exists in Volume Purchase Program, the application license will be assigned during enrollment through DEP. Otherwise, the licenes will be assigned using iTunes account.

    Note You must first configure Volume Purchase Program Settings to use this feature. Refer to the topic Setting Up Volume Purchase Program Licenses to configure Volume Purchase Program settings. See topic Installing MDA on Mobile Devices in Installation and Deployment Guide for the procedure to deploy and enroll Enterprise Mobile Security MDA on iOS mobile devices through DEP.

12. Click Save.
    Mobile Security Management Server synchronizes the mobile device list with the Apple Device Enrollment Programs server and displays the mobile devices on the Devices Enrollment Program tab on Devices screen.