Skip to main content
Matrix42 Self-Service Help Center

Apple Deployment Programs III: Configure DEP in Silverback

Register Device enrollment program 

Enrolment into Device Enrolment Program will be handled in Apple Business Manager Configuration Part.

Configure Device Enrollment Program

Apple’s Device Enrollment Program allows you to enroll devices into Silverback during first setup. For configuration perform the following steps:

  • Login to Silverback
  • Navigate to Admin 
  • Navigate to Device Enrollment Program

Home Section 

The main page gives an overview of the status and information relating to your Device Enrollment Program account. The organization and server information is displayed after a successful import of your token. The Account Overview section indicates how many devices are currently in your DEP account and how many are currently enrolled in Silverback.

Devices Section


The Devices section lists the devices in your DEP account and an associated username after enrollment. The table shows a list of all users in your DEP program, regardless of whether they are enrolled in Silverback. The list can also be exported by clicking the Export button. The table contains the following details:

Column Description
MDM Username If the serial number matches a currently enrolled user, it will be displayed here
Serial Number The serial number of the device in your DEP program
Model The model description of the device
Profile Name Displays the assigned profile for the device
Profile Status

Shows the profile status for the device. 

  • Assigned
  • Pushed

Pushed means that the Profile is ready to be applied on the device. It will be assigned as device will be enrolled

Profile Assigned Time Displays the timestamp for the profile assigned time. 
Disown Removes the device from the current and future DEP accounts.

The disown function will permanently remove a device from your current DEP. It takes an unknown grace period until the device can be added again. Please do this only if you feel confident. 


Action Description
Assign Profile Select first a range of devices and assign a specific profile. 
Bulk Assignment Use Bulk Assignment to assign profiles via a *.csv file. Please refer to our Knowledge Base article
Export This will generate an *.csv report

General Settings Section

The Settings section allows you to configure your integration with Apple’s DEP program and determine the device behavior for the standard profile.

Control Description
Company Token The token file provided by Apple
Valid Until Displays the expiration date for the Company Token. 

Determines the authentication method for the enrollment during the out-of-the-box experience. After a successful authentication, the MDM profile will be downloaded, installed and the devices will be enrolled. The following methods are available:

  • Username + Password: During the out-of-the-box experience users can authenticate with their local or LDAP user credentials to perform the enrollment. 
  • Username + OTP: If this option is selected, users are requested to authenticate with their local or LDAP username and with the One Time Password. 
User Prompt Text Contains the text presented to the user prior to the enrollment.
Default Profile
Name Displays the default profile name.
Allow Pairing Determines if the device can be paired with a computer.
Supervised Determines whether the device will be supervised.
Force Enrollment Determines if the user can skip the enrollment process. Note: The device will be unusable unless enrolled in Silverback.
Profile Removable Determines whether the MDM profile can be removed by the user after enrollment
Language Define the Language for Apple TV's and provide a language designator that represents a language. 
Region Define the Region for Apple TV's and provide a region designator that represents a country. Use the ISO 3166-1 standard, a two letter, capitalized code.
Support Phone Number Displayed to the user in the About section on enrollment.
Department Displayed to the user in the About section on enrollment.
Activate Apple Location Location for the devices to activate on enrollment. This should be changed to reflect your server address.
Skip Setup Items
Location Skip Location Services setup
Restore Skip Restore from backup
Apple ID Skip entering Apple ID information
Terms and Conditions Skip Terms and Conditions Agreement
Siri Skip Siri Setup
Diagnostics Skip Send Diagnostics prompt
Passcode Skip Passcode Setup
Touch ID Skip Touch ID Setup
Apple Pay Skip Apple Pay setup
Zoom Skip Zoom Setup
Move from Android Skip the migration from Android prompt
DisplayTone Setup Skips DisplayTone setup
Privacy Pane Skips privacy pane
Add Cellular Plan Pane Skips the add cellular plan SIM Setup pane
Home Button Screen Skips the Home Button Sensitivity screen in iOS.
iMessage and FaceTime Screen Skips the iMessage and FaceTime screen in iOS.
On-boarding Screen Skips on-boarding informational screens for user education (“Cover Sheet, Multitasking & Control Center”, for example) in iOS.
Screen Time Skips the screen for Screen Time in iOS.
Software Update Screen Skips the mandatory software update screen in iOS.
Watch Migration Screen Skips the screen for watch migration in iOS
Choose Your Look Screen  Skips the Choose Your Look appearance screen
Keyboad Pane Skips the Keyboard Pane 
Express Language Setup Skips the Express Language Setup
Preferred Language Order Skips the Preferred Language Order
Get Started Pane Skips the Get Started Pane
Device to Device Migration Skips Device to Device Migration pane in iOS
Restore Completed Skips the Restore completed Pane
Software Update Completed Skips the Software Update Completed Pane
Registration (OS X) Skip OS X Registration
FileVault Setup (OS X) Skip File Vault setup for Mac
iCloud Analytics Screen (OS X) Skips iCloud Analytics screen in macOS.
iCloud Documents and Desktop Screen (OS X) Skips iCloud Documents and Desktop screen in macOS
Accessibility (OS X) Skips Accessibility screen in macOS
Tap To Set Up Option (Apple TV) Skips Tap To Set Up Option in tvOS
Aerial Screensavers (Apple TV) Skips Aerial Screensavers in tvOS
TV Home Sync Screen (Apple TV) Skips TV Home Sync Screen in tvOS
TV Provider Sign In Screen (Apple TV) Skips TV Provider Sign In Screen in tvOS
TV Room (Apple TV): Skips TV Room in tvOS
Anchor Certificates Additional root certificates to be trusted by the device
Supervising Certificates If Allow Pairing is disabled, enter supervising computer certificates to allow the device to connect to that machine
Save Saves settings

Additional Profiles

With additional profiles you are able to assign specific profiles to specific devices. This will help as an example to configure the out-of-the-box experience for all iPhones in a different way as for iPads. Click new Profile to create a new profile and assign the profile in the Devices section.

Column Description
ID Displays a unique identifier for the device based on the database entry
Profile Name Displays the given name for the Profile
Registered in App This information show if the profile has been successfully registered on Apple side
Edit Edit your created profile
Remove Remove your created profile 


Clicking the Logs button will export a *.csv file of actions that have been performed specifically on the Device Enrollment Program. This covers changes made by administrators and also events that are related to the Silverback connection to Apple. 

The file will contain the following information:

  • Log ID
  • Date
  • User Name
  • Action
  • Action Destination 
  • Http Code
  • Http Text

Next Steps

  • Was this article helpful?