Using Apple Configurator to add devices to DEP

Prior to iOS 11, only devices purchased directly from Apple or specific resellers could be used with the Apple Device Enrollment Program (DEP).  With the release of iOS 11, you can use Apple Configurator to add almost any device to your DEP account and then take advantage of DEP enrollment.

Requirements

• A device running iOS 11 or higher or capable of accepting the upgrade.
• Apple Configurator 2.5 or higher.
• Administrative login to your institution's deployment account (DEP) or Apple School Manager (ASM).  Your account should have permission to manage devices.

Steps

1. Create a Wi-Fi profile in Apple Configurator
2. Create an organization and supervision identity in Configurator
3. Create an entry for Securly MDM server in Configurator
4. Prepare the iPad using Configurator, which also adds it to DEP
5. Assign the device to the Securly MDM server in ASM
6. Resync DEP
7. Enroll the device into Securly via DEP

1. Create a Wi-Fi profile

For Apple Configurator 2.5 or greater, choose New Profile from the File menu.

Choose Wi-Fi from the list of profile types on the left, then click the Configure button on the right.

Enter the SSID for your Wi-Fi, choose the appropriate security type and password, as well as any other relevant settings to connect to your Wi-Fi.

Choose Save from the File menu. 

Give the Wi-Fi profile a name that's easy to recognize, choose a location, and click Save.

2. Create an organization and generate (or choose) a supervision identity

Choose Preferences... from the Apple Configurator 2 menu.

Click on the Organizations icon at the top of the window, and then click the + button to add a new one

 Click Next

Sign in to the Apple School Manager using an account assigned to a role that has the privileges to manage devices.

Select the option to generate a new supervision identity, then click Done.

You should now see an entry for your organization in the column on the left.  You can now close the Organizations window. Note that you will see your own organization name rather than "Securly" as shown in the screenshot below.

3. Create an entry for Securly MDM Server

Choose Preferences... from the Apple Configurator 2 menu.

Click on the Servers icon at the top of the window, then click the + button to add a new one

Click Next.

Enter the name of the server.  We recommend "Securly MDM Server".  For the hostname, enter deviceconsole.securly.com. Click Next.

You should now see the new server entry in the column on the left.  Close the Servers window.

4. Prepare the iPad using Configurator

This step prepares the iPad and also adds the device.

Connect the iPad to your computer. If prompted, choose "Trust" on the iPad.

In Configurator, right-click on the iPad and choose Prepare or choose Prepare from the Actions menu.

Use "Manual Configuration" and check only the boxes for "Add to Apple School Manager or Apple Business Manager" and "Allow devices to pair with other computers." Click Next.

For the server, the name of the server you created in the earlier step should already be selected. Click Next.

For Organization, the name of the organization you created in the earlier step should already be selected.  Click Next.

Configure iOS Setup Assistant. For this step, there's no need to select options because the setup assistant options configured in the DEP setup area of the Control Tower will be used instead.  Click Next. 

Choose the network profile that you created and saved in the earlier step.  Click Prepare.

If your device was previously supervised through the Apple Configurator, you may receive a warning that the device is already being prepared. If so, click Erase.

During preparation, the Configurator will check that the version of iOS is at least iOS 11.  If not, you'll be prompted to update it.  Click the Update button to have the Configurator install the iOS update.

During step 2 of 2: activating iOS on the device, the device will reboot and display the Hello screen.  At this point,  DO NOT press home to unlock yet!  After a moment, the device will reboot again.

5. Assign the device to the Securly MDM server in ASM

At this point, the device should now be available on your DEP account.  To verify, login to ASM and choose MDM Servers from the menu. Notice that a new server was automatically added called "Devices Added by Apple Configurator 2"  which should now show at least 1 Device.  Click on this server entry to see the details.  You might wish to download a CSV file with the serial number(s) of the device(s) to make the device assignment easier as a next step.

Choose Device Assignments from the menu.  Enter the serial number of the new device.  Set the action to "Assign to Server" and choose your Securly MDM server from the selector.  Click Done.

If successful, the Assignment Complete window will display.

6. Resync DEP in the  - Disconnect the iPad from the Apple Configurator

 In Securly MDM, go to the Apple DEP tab in Settings.  Click on the name of your ASM DEP account. 

Force your DEP account to re-sync so that it recognizes the newly added DEP device(s) by clicking the Update DEP Settings button at the bottom of the DEP configuration screen.

Optionally, you can check to make sure that the device is enrolled in the Securly MDM by using the DEP Lookup button at the top of the DEP accounts list.

 7. Enroll the device into Securly MDM via DEP

Now that the device is in your DEP account and Securly MDM recognizes that it is enrolled, you will begin the normal DEP enrollment process.  

Press the Home button on the Hello screen to set up the iPad - Manually setup 

A Remote Management screen will appear. Choose Next.

You will see a message that your organization will automatically configure your iPad. Choose Next.

Only setup assistance options enabled through DEP settings in MDM will be displayed.

Once the process is finished, your iPad will be enrolled!