Apple Deployment Programs II: Configure Deployment Programs
Basic Configuration
Before you start here, you should have completed the chapter Apple Deployment Programs I: Sign up.
Add Admin Accounts
- Login to your Apple Business Manager or Apple School Manager
- Navigate to Users
- Click +Add
- Add the following information
- First Name
- Middle Name (optional)
- Last Name
- Username for Managed Apple ID
- Choose a Role (The Organization will be filled automatically with your Master Location)
- Email Address
- Click Save
Add Reseller Numbers
- Click on the bottom left on your account
- Select Preferences
- Select MDM Server Assignment
- Next to Customer Numbers press Edit
- Add a DEP Reseller ID or Apple Customer Number
- Add additional DEP Reseller IDs or Apple Customer Numbers if necessary
- Click Done
Add Device Enrollment & Volume Purchase Program
Apple Business and School Manager combines Device Enrollment Program and Volume Purchase Program in one console. Depending on your preferences, you can configure either the Device Enrollment Program or the Volume Purchase Program or both. Both Deployment Programs have a part that needs to be done in Apple Business or School Manager and a part that needs to be done in Silverback.
Device Enrollment Program
Apple's Device Enrollment Profile (DEP) program automates mobile device management (MDM) enrollment. Using DEP, you can configure enterprise devices without touching them. To configure the Device Enrollment Program, you need to create a public key, add your Silverback Server in the Apple Business or School Manager and import the trusted server token into Silverback. For the connection and the usage of the Device Enrollment Program, an Apple Push Notification Certificate is mandatory.
Create your DEP Token
- Open your Silverback Management Console
- Login as Administrator
- Navigate to Admin
- Navigate to Device Enrollment Program
- Click Enabled
- Click Download Public Key
- A download of the Public Key File will start: SB_MDM_Public_Key.pem
Upload Public Key
- Login to Apple Business Manager or Apple School Manager
- Click on the bottom left on your account
- Select Preferences
- Press +Add next to Your MDM Servers
- Enter as Server name e.g. Silverback
- Select Choose File
- Select the your previously downloaded Public Key: SB_MDM_Public_Key.pem
- Press Save
Download Token
- Click Download Token
- Confirm Download Server Token
- You downloaded now a file named like Silverback_Token_2020-01-14T17-08-52Z_smime.p7m
Import Token
- Navigate back to your Silverback Management Console
- Click Choose File
- Upload now the previously downloaded Token from Apple file: Silverback_Token_2020-01-14T17-08-52Z_smime.p7m
- Click Save
- Click Ok
- Wait a few moment for the system to connect and update with Apple
- Refresh the Browser Page or navigate to another section and switch back to Device Enrollment Program
- Congratulations. Silverback is now linked with Apple Device Enrollment Program
Review Logs
- Logs can be found under e.g. https://silverback.imagoverum.com/sts/logs
- Navigate to the Device Enrollment Program section
Next Steps
- Proceed with Volume Purchase Program Integration
- Check upfront how you can update the Device Enrollment Program token: Device Enrollment Program Token Renewal
- Check all settings for Device Enrollment Program: Apple Deployment Programs III: Configure DEP in Silverback
- Learn how to add devices: Apple Deployment Programs IV: Manually add devices to DEP
Volume Purchase Program
Volume Purchase Program provides IT Administrators an easy way to find, purchase, and distribute Apps and Books in volume for the entire organization.
Before your start
Before you start please note the following criteria:
- If you previously used a VPP token with a different product, you must generate a new one
- A VPP token is only supported for use in one MDM System at time. Do not reuse the same VPP token for multiple MDM Systems
- Tokens are valid for one year
- Before you start to use Apple VPP with Silverback, remove any existing VPP user accounts created with other mobile device management (MDM) vendors.
- We recommend to use the Device only as VPP Operation mode. When you assign VPP apps using the user licensing model to users or devices (with user affinity), each user needs to be associated with a unique Apple ID or an email address when they accept the Apple terms and conditions on their device. Ensure that when you set up a device for a new Silverback user, you configure it with that user's unique Apple ID or email address. The Apple ID or email address and Silverback user form a unique pair and can be used on up to five devices.
- By default, Silverback synchronizes with the Apple VPP service in a given period to refresh. A manual sync is possible at any time.
Get Token
Depending of where you started and on which Apple Business or School Manager version you are running, you may face a different user experience.
- Open Apple Business Manager or Apple School Manager
- Login with your Managed Apple ID
- Enter your Two-Factor Authentication Code
- Click Trust this browser
- Navigate to Apps and Books
- Choose Tax-Status
- Proceed with Continue
- Click Get Started
- Accept Terms and Conditions
- Click on the bottom left on your account
- Select Preferences
- Click Payments and Billing
- Under Apps and Books, locate your Server and press Download
- A new file will be downloaded: sToken_for_Silverback.vpptoken
If you do not find your server, add first a new Location under Locations.
Import Token
- Navigate to Silverback
- Login as Administrator
- Navigate to Admin
- Navigate to Volume Purchase Program
- Enable the Volume Purchase Program chebox
- Click Choose File
- Select your previously downloaded Token: sToken_for_Silverback.vpptoken
- Press Save token
- Wait a couple of seconds
- Click Refresh
Change VPP Operation Mode
- Change VPP Operation Mode to Device Preferred (recommended)
- Please review Volume Purchase Program: Operation Modes for additional information
Enable and Review Logs
- Enable detailed logging (optional)
- Click Save Settings
- Logs can be found under e.g. https://silverback.imagoverum.com/sts/logs
- Navigate to the Volume Purchase Program section
It may take a while until Volume Purchase Program Logs are visible.
After the Volume Purchase Program process is established and working, you might consider to disable the detailed logging again and only enable it in case of synchronization issues.
Next Steps
- Check upfront how you can update the Volume Purchase Program token: Volume Purchase Program Token Renewal
- Learn how to configure Device Enrollment Program: Apple Deployment Programs III: Configure DEP in Silverback
- Learn how to to shop and distribute applications and handle Volume Purchase Program section: Apple Deployment Programs V: VPP in Silverback