Apple DEP Enrollment

Benefits of DEP Enrollment

iOS, tvOS, and macOS can all take advantage of Apple DEP enrollment. DEP enrollments will force a specific set of preferences on the device and force enrollment to FileWave any time the device is Factory Reset. Another huge benefit of DEP is that DEP is the only enrollment option that prevents the end-user from removing the MDM Profile and unenrolling the device. These two aspects can be very helpful in device recovery situations since if the device is wiped after being lost or stolen, the device will automatically enroll back into FileWave where you can lockdown the device and collect Location Tracking information to report to the authorities.

If you have not already created your Apple Push Notification Service Certificate (APNS) or configured DEP to sync with FileWave, please review the Platform Integrations > Apple Integration section before continuing.

Creating DEP Profiles

The first step to enrolling your Apple devices via DEP is to create a DEP Profile. The DEP Profile is what will determine the initial settings applied to the device during enrollment and applies to all Apple platforms. Unless needing explicit seperation of the initial enrollment settings, one DEP Profile can suffice for all of your devices. This is partly possible since we can use FileWave Custom Fields to uniquely name the devices.

  1. Open FileWave Admin and navigate to "Assistants > DEP Association Management".
  2. Click the "[+]" button on the right-hand side under "Profiles".
  3. Fill out each tab according to your management preferences.

DEP Enrollment - Information.jpg

DEP Enrollment - Options.jpg

DEP Enrollment - Setup Assistant.jpg

DEP Enrollment - Account.jpg

DEP Enrollment - Anchor Certs.jpg

DEP Enrollment - Supervising Certs.jpg

DEP Enrollment - Device Naming.jpg

DEP Enrollment - Activation Lock Management.jpg

Assigning DEP Profiles

Assigning DEP Profiles is very easy within FileWave, especially if you only have one DEP Profile since you can set a Default DEP Profile. With a Default DEP Profile configured, anytime you assign a new device to the FileWave MDM Server from within Apple School Manager or Apple Business Manager, the DEP Profile will automatically apply and the device will be ready for DEP enrollment. However, if you have multiple DEP Profiles, FileWave will also enable you to create Rule-based DEP Profile assignments or you can always just drag-n-drop a DEP Profile onto a single device or multiple devices onto a DEP Profile.

The "Profile Status" field in the "Devices" pane tells you the current status of the DEP profile on the client device.

Setting Default DEP Profile

  1. Open FileWave Admin and navigate to "Assistants > DEP Association Management".
  2. Click "Edit Assignment Rules".
  3. Select your recently created DEP Profile from the "Default DEP Profile" dropdown menu.
  4. Click "OK".
  5. Click "Apply Assignment Rules" to save the changes.
  6. Hold the Option or Alt key on your keyboard and click "Synchronize (full sync)" button in lower right-hand corner
  7. You should now see that all of your devices have been "Assigned" to your DEP Profile.