Apple Deployment Programs V: Configure DEP in Silverback
Register Device enrollment program
Enrolment into Device Enrolment Program will be handled in Apple Business Manager Configuration Part.
Configure Device Enrollment Program
Apple’s Device Enrollment Program allows you to enroll devices into Silverback during first setup. For configuration perform the following steps:
- Login to Silverback
- Navigate to Admin
- Navigate to Device Enrollment Program
Home Section
The main page gives an overview of the status and information relating to your Device Enrollment Program account. The organization and server information is displayed after a successful import of your token. The Account Overview section indicates how many devices are currently in your DEP account and how many are currently enrolled in Silverback.
Devices Section
Overview
The Devices section lists the devices in your DEP account and an associated username after enrollment. The table shows a list of all users in your DEP program, regardless of whether they are enrolled in Silverback. The list can also be exported by clicking the Export button. The table contains the following details:
| Column | Description |
|---|---|
| MDM Username | If the serial number matches a currently enrolled user, it will be displayed here |
| Serial Number | The serial number of the device in your DEP program |
| Model | The model description of the device |
| Profile Name | Displays the assigned profile for the device |
| Profile Status |
Shows the profile status for the device.
Pushed means that the Profile is ready to be applied on the device. It will be assigned as device will be enrolled |
| Profile Assigned Time | Displays the timestamp for the profile assigned time. |
| Disown | Removes the device from the current and future DEP accounts. |
The disown function will permanently remove a device from your current DEP. It takes an unknown grace period until the device can be added again. Please do this only if you feel confident.
Actions
| Action | Description |
|---|---|
| Assign Profile | Select first a range of devices and assign a specific profile. |
| Bulk Assignment | Use Bulk Assignment to assign profiles via a *.csv file. Please refer to our Knowledge Base article |
| Export | This will generate an *.csv report |
General Settings Section
The Settings section allows you to configure your integration with Apple’s DEP program and determine the device behavior.
| Control | Description |
|---|---|
| Settings | |
| Company Token | The token file provided by Apple |
| Valid Until | Displays the expiration date for the Company Token. |
| Active Directory Authentication | Determines whether Active Directory Credentials will be used during a device enrollment or the classic One Time Password. |
| User Prompt Text | The text presented to the user on enrollment. |
| Default Profile | |
| Name | For the default profile the name is |
| Allow Pairing | Determines if the device can be paired with a computer. |
| Supervised | Determines whether the device will be supervised. |
| Force Enrollment | Determines if the user can skip the enrollment process. Note: The device will be unusable unless enrolled in Silverback. |
| Profile Removable | Determines whether the MDM profile can be removed by the user after enrollment |
| Language | Define the Language for Apple TV's and provide a language designator that represents a language. |
| Region | Define the Region for Apple TV's and provide a region designator that represents a country. Use the ISO 3166-1 standard, a two letter, capitalized code. |
| Support Phone Number | Displayed to the user in the About section on enrollment. |
| Department | Displayed to the user in the About section on enrollment. |
| Activate Apple Location | Location for the devices to activate on enrollment. This should be changed to reflect your server address. |
| Skip Setup Items | |
| Location | Skip Location Services setup |
| Restore | Skip Restore from backup |
| Apple ID | Skip entering Apple ID information |
| Terms and Conditions | Skip Terms and Conditions Agreement |
| Siri | Skip Siri Setup |
| Diagnostics | Skip Send Diagnostics prompt |
| Passcode | Skip Passcode Setup |
| Touch ID | Skip Touch ID Setup |
| Apple Pay | Skip Apple Pay setup |
| Zoom | Skip Zoom Setup |
| Move from Android | Skip the migration from Android prompt |
| DisplayTone Setup | Skips DisplayTone setup |
| Privacy Pane | Skips privacy pane |
| Add Cellular Plan Pane | Skips the add cellular plan SIM Setup pane |
| Home Button Screen | Skips the Home Button Sensitivity screen in iOS. |
| iMessage and FaceTime Screen | Skips the iMessage and FaceTime screen in iOS. |
| On-boarding Screen | Skips on-boarding informational screens for user education (“Cover Sheet, Multitasking & Control Center”, for example) in iOS. |
| Screen Time | Skips the screen for Screen Time in iOS. |
| Software Update Screen | Skips the mandatory software update screen in iOS. |
| Watch Migration Screen | Skips the screen for watch migration in iOS |
| Choose Your Look Screen | Skips the Choose Your Look appearance screen |
| Keyboad Pane | Skips the Keyboard Pane |
| Express Language Setup | Skips the Express Language Setup |
| Preferred Language Order | Skips the Preferred Language Order |
| Get Started Pane | Skips the Get Started Pane |
| Registration (OS X) | Skip OS X Registration |
| FileVault Setup (OS X) | Skip File Vault setup for Mac |
| iCloud Analytics Screen (OS X) | Skips iCloud Analytics screen in macOS. |
| iCloud Documents and Desktop Screen (OS X) | Skips iCloud Documents and Desktop screen in macOS |
| Tap To Set Up Option (Apple TV) | Skips Tap To Set Up Option in tvOS |
| Aerial Screensavers (Apple TV) | Skips Aerial Screensavers in tvOS |
| TV Home Sync Screen (Apple TV) | Skips TV Home Sync Screen in tvOS |
| TV Provider Sign In Screen (Apple TV) | Skips TV Provider Sign In Screen in tvOS |
| TV Room (Apple TV): | Skips TV Room in tvOS |
| Certificates | |
| Anchor Certificates | Additional root certificates to be trusted by the device |
| Supervising Certificates | If Allow Pairing is disabled, enter supervising computer certificates to allow the device to connect to that machine |
| Save | Saves settings |
Additional Profiles
With additional profiles you are able to assign specific profiles to specific devices. This will help as an example to configure the out-of-the-box experience for all iPhones in a different way as for iPads. Click new Profile to create a new profile and assign the profile in the Devices section.
| Column | Description |
|---|---|
| ID | Displays a unique identifier for the device based on the database entry |
| Profile Name | Displays the given name for the Profile |
| Registered in App | This information show if the profile has been successfully registered on Apple side |
| Edit | Edit your created profile |
| Remove | Remove your created profile |
Logs
Clicking the Logs button will export a *.csv file of actions that have been performed specifically on the Device Enrollment Program. This covers changes made by administrators and also events that are related to the Silverback connection to Apple.
The file will contain the following information:
- Log ID
- Date
- User Name
- Action
- Action Destination
- Http Code
- Http Text
Next Steps
- Get in touch with your hardware vendor for device purchasing and other services or
- Learn how to add devices with Apple Configurator to Device Enrollment Program
- Read further Apple Documentation: Device Enrollment Program Guide