Introduction

Apple Business Manager (ABM) and Apple School Manager (ASM) connects Ensemble to Apple Automatic Device Enrollment which is used to setup fully managed devices in supervised mode. Learn more

This will allow Ensemble to manage devices on a Fully Managed project.

Connect Ensemble to ABM or ASM

Create the Ensemble Token File

1. Log into the Ensemble management console and navigate to the Devices page. 
2. Select the Apple Automated Device Enrollment tab from the Deployment options tile at the top of the page. 
3. Download the public key certificate.

This file is a public key unique to your company and should be kept forever in a secure location.

Create an ABM or ASM MDM Server

A unique ABM or ASM MDM connection is required for each Ensemble company account.

1. From your Apple Business or School Manager account, click on your name at the bottom of the navigation menu and select Preferences.
   
2. Next to Your MDM Servers, click the Add button to create a new MDM connection.
   1. MDM Server Name: any name is supported, but we recommend using something that matches the Ensemble company name
   2. Upload Public Key: use the Ensemble public key certificate created in step 2.
3. After creating the new MDM connection, you will be redirected to an MDM Configuration page that has a "Download MDM Server Token" button at the top.
4. Click the Download button
5. Upload the resulting file to Ensemble Devices page in the Apple Automated Device Enrollment tab from the Deployment options tile at the top of the page.
6. Enrollment is complete!

Register a Device in ABM or ASM

1. If devices were purchases through an Authorized Apple Reseller, the reseller can load the devices directly into your ABM or ASM account. Learn More.
2. Device can also be loaded manually through Apple Configurator from a Mac, iPhone, or iPad. Learn more
   1. Plug device to configure into a Mac that has Apple Configurator installed
   2. Select the device and click Prepare
   3. Choose 'Manual Configuration' from the dropdown
   4. Check 'Add to Apple School Manager or Apple Business Manager'
   5. Uncheck 'Activate and complete enrollment'
   6. Setup the MDM Server
      1. Name: name the sever something
      2. Host name or URL:
         1. Beta: https://ios-dev.ensemblemdm.com/
         2. Production: https://gw-ios.ensemblemdm.com/ 
   7. Assign to Organization
      1. Sign into ABM or ASM
   8. Configure iOS Setup Assistant
   9. Choose Network Profile
   10. Apple Configuration will add the device to ABM or ASM
   11. Now the devices can be synced to Ensemble

Sync ABM / ASM Devices with Ensemble

Devices can be added to ABM or ASM by an authorized Apple Reseller or through Apple Configurator.

1. Go to the Apple Business or School Manager platform
2. Find your desired device under 'Devices'
3. Click the ellipsis in the upper right
4. Select "Edit MDM Server".
5. Assign the device to the MDM connection created above.
6. In Ensemble, go to the Devices page
7. Click the ellipsis in the upper right corner of the devices table.
8. Click the "Sync from Apple" to import devices from ABM or ASM into the Ensemble company device table.

Manage Automatic Device Enrollment Configurations

Warning: Device enrollment configuration names cannot be edited once the profile has been created.

1. Create and manage device enrollment configurations under the Apple Automatic Device Enrollment tab.
   1. Configuration Name: a friendly label for the configuration
   2. Department: [Remote management screen?]
   3. Support Phone Number: [Remote management screen?] 
   4. Support Contact Email: [Remote management screen?] 
   5. Auto Advance Setup: skip options during the setup wizard
      1. Accessibility
      2. Action Button
      3. Android: skip option to migrate from an Android device on the Apps & Data screen
      4. App Store
      5. Appearance: skip the Appearance screen which allows the user to choose light or dark mode. [ Maybe Display Zoom? standard or zoomed]
      6. Apple ID: skip the Apple ID screen. The Apple ID is used with iCloud, the App Store and other Apple services.
      7. Biometric: skip the Touch ID or Face ID screen
      8. Device to Device Migration: skip option to migrate from an iOS device on the Quick Start screen
      9. Diagnostics: skip the iPhone Analytics screen. This screen shares data with Apple so they can improve its products and services.
      10. Intelligence
      11. Location: skip the option to enable Location Services
      12. Messaging Activation Using Phone Number
      13. Passcode: skip the Create a Passcode screen
      14. Payment
      15. Privacy: Apple explains the 'Data & Privacy' icon
      16. Restore: Restore for iCloud Backup or from Mac or PC options on the Apps & Data screen
      17. Restore Completed
      18. SIM Setup
      19. Screen Time: skip the Screen Time setup screen
      20. Siri: skip Siri setup screen
      21. Software Update: skip the Keep Your iPhone Up to Date screen
      22. Terms of Service: skip the Terms and Conditions screen
      23. Terms of Address
      24. Update Completed
      25. Voice Selection
      26. Watch Migration
      27. Welcome: skip Welcome to iPhone screen which is the final step of the setup wizard
      28. iMessage and FaceTime: skip the iMessage & FaceTime setup screen
          

Assign Automatic Device Enrollment Configurations to Devices

• Either select multiple devices and click the button on the horizontal table row
• under an individual device's options, there use the 'Assign' action for ADE.