Enroll Apple Devices Using Apple Business Manager (ABM)

Apple Business Manager (ABM) automatically enrolls company owned Apple devices in the Seqrite EMM server during device activation. This zero-touch process automatically applies your organization’s settings and policies to the device.

Key Components of Apple Device Enrollment

• Apple Business Manager (ABM): Apple’s web-based portal for managing company owned devices and services.
• Automated Device Enrollment (ADE): Apple’s zero-touch enrollment method for enrolling devices in an Seqrite EMM.
• Seqrite EMM Server: The Seqrite EMM Server that manages enrolled devices.
• Supervised Device: A device with advanced management controls available to organizations.
• Zero-Touch Enrollment: A deployment method that automatically enrolls and configures devices during activation.

Prerequisite

• Your organization has an active Apple Business Manager account.
• Apple Device Enrollment is set up in Seqrite EMM.
• An APNs certificate is available and configured.
• Apple devices are purchased through Apple or an Apple-authorized reseller.
• The administrator has access to ABM with appropriate privileges.

Apple Device Enrollment Workflow

• Configure the ADE (Automated Device Enrollment) Account
• Download Service Token from Apple Business Manager (ABM)
• Add Devices to Apple Business Manager
  • Zero-Touch Provisioning
  • Manual Device Addition Using Apple Configurator
• Add Devices to Apple Business Manager
• Assign Devices to the Seqrite EMM
• Sync Devices

Step 1: Configure the ADE (Automated Device Enrollment) Account

1. Sign in to the Seqrite EMM.
2. Navigate to Setup Services>>Apple Certificate >>ADE Configuration(ABM/ASM).
3. Enter account name and click Download pem file.
4. Upload token (.p7m) generated from ABM.
   To learn more about downloading Service token, refer to, Download Service Token from ABM.
5. Save the configuration.

Note: After the token upload is complete, Seqrite EMM requires you to log in again. After logging in, the ADE configuration details are displayed in Setup Services.

The connection between Apple Business Manager and the Seqrite EMM is now established.
The PEM file is required to establish trust between Apple Business Manager and the EMM.

Step 2: Download Service Token from ABM

• In Management Services>>Add your external device management services, enter service name and upload PEM file and click Next.

Step 3: Add Devices to Apple Business Manager

Organizations can add devices to ABM using one of the following methods:

• Zero-Touch Enrollment
• Manual Device Addition Using Apple Configurator

Zero-Touch Enrollment

Prerequisites

• Devices are purchased from an Apple-authorized reseller.
• The reseller supports ABM device assignment.

Steps:

1. Sign in to Apple Business Manager.
2. Add the Reseller ID in ABM to establish the reseller association.
3. Purchase Apple devices through the reseller.
4. The reseller assigns the purchased devices to your ABM account.
5. Verify that the devices appear under Devices in Apple Business Manager.

Note: The devices become available for assignment to an MDM server without requiring manual device preparation.

Manual Device Addition Using Apple Configurator

If devices were not purchased through Apple or an authorized reseller, they can be manually added to ABM using Apple Configurator.

should we give as is given on apple doc page?

Step 4: Assign Devices to the Seqrite EMM

1. In Apple Business Manager, navigate to Devices.
2. Search for and select the required devices.
3. Choose Assign to Server.
4. Select the configured MDM server.
5. Confirm the assignment.

Step 5: Sync Devices

In Seqrite EMM, you can sync devices either from the Setup Services page or from the Devices page.

1. Open the Seqrite EMM.
2. Navigate to Setup Services and click Sync ABM Devices.

Or

3. Navigate to Devices and click Sync ABM Devices from list device list page.

The assigned devices are imported into the Seqrite EMM portal and appear Pending stage.

What Happens During Device Activation?

When an end user activates a device:

1. Power on the device.
2. Connect to a network.
3. The device contacts Apple activation servers.
4. Apple identifies the assigned MDM server.
5. The Remote Management screen is displayed.
6. Enrollment is completed automatically.
7. Organizational policies, restrictions, and applications are applied.