orchard dep self enrollment guide
DESCRIPTION
TRANSCRIPT
Setting Up and Managing Devices through Apple’s DEP Table of Contents ● Introduction ● Creating an account ● Signing up for DEP ● Setting Orchard up ● Managing servers ● Assigning devices by order number ● Assigning devices by serial number ● Conclusion
Minimum Requirements
⎕ Devices less than three years old
⎕ Devices were purchased new ⎕ Devices have not been previously enrolled in DEP ⎕ Sufficient wifi bandwidth
Introduction The Device Enrollment Program (DEP) allows institutions and businesses to manage iPads and other iOS devices without physical intervention, and without using Configurator. DEP allows IT departments to manage devices in bulk, streamline and customize the setup process, and seamlessly connect devices in their DEP to their MDM solution in order to conveniently manage devices.
Configurator + Deployerator DEP + Orchard
● Wired configuration ● Dozens or even hundreds of apps
loaded on every device
● Wireless, silent configuration ● Only apps necessary to each
quest are installed
1
● Manual app installation ● Apps purchased through
redeemable codes and associated with an Apple ID
● Automatic app installation ● Apps purchased as managed
licenses associated with and managed by the institution
The steps for setting up your DEP account and assigning devices to your school are outlined below. If you have any questions while working through the processes, please email [email protected].
Creating an account In order to participate in Apple’s Volume Service offerings, you’ll need to create an Apple ID for use with deploy.apple.com. This should be separate from the Apple ID you use for personal purchases.
A note on DEP accounts There are two types of accounts, an Agent account and a Admin account. The agent accountcreates and controls the admin accounts. You cannot use a current VPP or Apple ID username to create a DEP Agent account. It has to be a new username. Apple verifies Agent accounts by visiting your school’s website to verify that the Agent is an administrator or technology director. If the Apple representative doing the verification doesn’t see the Agent’s name on the school or district’s website, your account will be rejected.
● If you don’t yet have an account, click “Enroll Now” on the deploy.apple.com
landing page.
2
3
● You can enroll in any of Apple’s education services here. Since we want to enroll and manage devices, click “Enroll” to the right of “Device Enrollment Program”.
● Fill in your contact information and title.
4
● It’s important to use a new email address associated with your institution ([email protected], for example). Apple does not provide deployment services management options to unsupervised email accounts ([email protected] or [email protected], for example), and your ID will not be eligible for these programs if it has been used for any other Apple services in the past.
● The next step is identity verification. You will be instructed to check your email
to continue the setup process.
5
● This is the email you will receive. Make note of the temporary password Apple has assigned to your account.
6
● In order to continue the registration process, you will need to enable two-step verification and create security questions for your new account. You can accomplish this by clicking the link at the top of your verification email.
● Selecting the “My Apple ID” link in your email will take you to Apple’s ID management site. Sign in using your new school-connected Apple ID.
7
● The temporary password Apple provides expires upon first login, so you’ll be asked to reset it before you continue.
● Next, you’ll be required to provide your birthday and set up one unique security question.
8
● When you arrive at the ID management page, you’ll need to set up account security by enabling two-step authentication and adding answers to security questions generated by Apple.
● Click “Get Started” beneath the Two-Step Verification section of the page. Read the explanation and click “Continue”.
9
● Add a phone number to be used for identity confirmation.
● Print your recovery key. You won’t have any other way to access your account if you forget your password, so this step is particularly important.
10
● Enter your recovery key, then click “Confirm”.
● Indicate that you accept the conditions and terms by clicking the checkbox.
11
● Click the “Enable two-step Verification” button at the bottom of the page and
you can now begin the DEP enrollment process.
● Once you’ve enabled two-step authentication, you can go back to deploy.apple.com and sign in. There will be three steps left in the registration process: verification contact details, institution contact details, and a review of information.
● Provide contact information for a school building or district leader who can verify your legal authority as an administrator of Apple’s programs.
12
● Add your institution’s address and Apple Customer Number. If you aren’t sure what your customer number is, contact your Apple Account Executive.
13
● The final step in creating your account is reviewing your enrollment details. If the information is accurate, submit your responses.
● When you click the submit button, your verification contact person will receive an email. Once he or she authorizes your account, you’re ready to sign up for a specific volume services programs. Before you do that, you’ll need to make sure your institutional Apple ID is set up to work with deploy.apple.com.
14
Signing up for DEP Access to Apple’s Volume Services Portal is available at deploy.apple.com, so sign in and continue the DEP enrollment process.
15
● Click “Admins” on the sidebar. This will give you a chance to add yourself as an administrator.
● Select “Add Admin Account”.
16
17
● Fill out the fields and choose which programs you want this admin account to be able to access.
● Submit your Admin account and you will be asked to verify your identity. Enter the verification code you received via SMS or email.
18
● Now you’re ready to use Apple’s Device Enrollment Program. Click “Get Started” or use the sidebar to select “Device Enrollment Program”.
19
Setting Orchard up eSpark Learning’s Orchard MDM is a simple but powerful way to manage iPads. In order to set up your servers at deploy.apple.com, you’ll first need to sign in to your organization’s management site at www.esparklearning.com.
● Log in to your institution’s eSpark page and choose “Settings” in the sidebar.
20
● In the Admin Dash, click the button labeled “Set up Devices”. This will open eSpark’s MDM configuration page.
Adding your devices to eSpark’s Orchard MDM requires you to log in to Apple’s Device Enrollment service at deploy.apple.com to gather some information and upload your Orchard public key. Start by downloading your Orchard key from eSpark’s “Set up Device Enrollment” page.
21
We’re going to leave eSpark’s website to set up our servers and download the server token we will need to assign these devices to Orchard. Leave the “Set up Device Enrollment” page open in your browser so you can return to it during the next setup sequence.
22
Managing Servers Your Mobile Device Management solution needs to be configured before you assign devices to it. You’ll need to add the Orchard MDM server, download your public key from eSpark, then upload the key to Apple’s servers.
● Head back to deploy.apple.com, then use the sidebar or the “Get Started” link to access your institution’s DEP page.
● The first step is adding an MDM server. Select “Manage Servers” from the sidebar.
23
● Click “Add MDM Server”.
● Type in the name of your MDM server (“eSpark Orchard”) and decide whether you want new devices automatically assigned to this server.
24
● Since you have already downloaded your public key from Orchard, upload it to Apple’s servers by selecting “Choose File”, then navigating to your key on your hard drive (check your Downloads folder).
● Fill in the server details of eSpark’s Orchard MDM. Here you can change the server’s name, replace the public key you provided, and generate new server tokens.
25
● Click “Generate New Token”, then return to eSpark’s “Set up Device Enrollment” page.
● Navigate to the bottom of eSpark’s device enrollment page and click the “Choose File” button. Then select the token file that you just downloaded from the server. Click “Upload” to complete the process.
26
● Once you’ve added your MDM on Apple’s deployment services page, filled in the server details, and shared the token with eSpark, you should redownload the serial numbers of the devices you’ve enrolled. Click “Download Serial Numbers” at the top of the Server Details dialog box.
● A .csv of the devices assigned to the server will be downloaded to your computer from Apple’s servers..
27
Assigning Devices by Order Number The next step in the enrollment process is assigning your devices to the MDM you just set up. Use the sidebar to navigate to “Assign by Order Number” if you have an order number from Apple and would like to assign all devices associated with that number. Assigning by order number will enroll all devices that are part of an order without exception. To enroll a selection of devices from an order, scroll down to Section IV, Assigning Devices by Serial Number.
● Use the sidebar to select “Assign by Order Number”.
● Assigning by Order Number is a two step process. First, input the order number of the devices you want to assign.
28
● The order number will call up the contents of the order itself. Here you can see the devices included in your order and their current state of assignation. No devices in this demo order have been assigned yet.
● To see a list of device serial numbers, click Download CSV. Otherwise, you can skip ahead to choosing an MDM server.
29
● Then choose the MDM server you want the devices assigned to from the dropdown menu.
30
Once you’ve selected your MDM, click the “Assign Now” button.
31
Assigning Devices by Serial Number If you don’t have your order number or don’t want to assign all devices in an order to the same MDM, you can use individual device serial numbers to manage devices.
● Start by using the sidebar to select “Assign by Serial Number”.
32
● The user has two options: enter a list of device serial numbers, or upload a .csv file containing the serial numbers of the devices you want to manage. You can input the serial numbers directly into the text field, or click the radio button to the left of “Upload a file containing serial numbers.”
● You can enter individual serial numbers or upload a spreadsheet populated with the serial numbers of multiple devices. To begin the upload process, select “Choose File”.
33
● If you haven’t created your .csv file yet, you can download a template provided by Apple.
Once you download and populate the .csv with data, upload it by clicking “Choose file” and selecting your .csv.
34
● You can see which devices you’ve assigned by checking your Assignment History.
● Select “Details” to learn more about previous assignments.
35
● Assignment details include information about who assigned the devices, when devices were assigned, and the MDM server name.
Conclusion Apple’s Device Enrollment Program makes managing devices convenient and supports the company’s zero-touch deployment goal. eSpark Learning’s Orchard MDM is built with DEP integration in mind and works seamlessly to deliver apps silently and wirelessly while still giving schools control over license allocation. If you have any additional questions, please contact your School Partnership Manager or [email protected].
36