Introduction

Apple Business Manager (ABM) and Apple School Manager (ASM) connects Ensemble to Apple Automatic Device Enrollment which is used to setup fully managed devices in supervised mode. Learn more


This will allow Ensemble to manage devices on a Fully Managed project.


TABLE OF CONTENTS

Connect Ensemble to ABM or ASM

Create the Ensemble Token File

  1. Log into the Ensemble management console and navigate to the Devices page. 
  2. Select the Apple Automated Device Enrollment tab from the Deployment options tile at the top of the page. 
  3. Download the public key certificate.
This file is a public key unique to your company and should be kept forever in a secure location.


Create an ABM or ASM MDM Server

A unique ABM or ASM MDM connection is required for each Ensemble company account.
  1. From your Apple Business or School Manager account, click on your name at the bottom of the navigation menu and select Preferences.
    1. Next to Your MDM Servers, click the Add button to create a new MDM connection.
    2. MDM Server Name: any name is supported, but we recommend using something that matches the Ensemble company name
    3. Upload Public Key: use the Ensemble public key certificate created in step 2.
  2. After creating the new MDM connection, you will be redirected to an MDM Configuration page that has a "Download MDM Server Token" button at the top.
  3. Click the Download button
  4. Upload the resulting file to Ensemble Devices page in the Apple Automated Device Enrollment tab from the Deployment options tile at the top of the page.
  5. Enrollment is complete!


Register a Device in ABM or ASM

  1. If devices were purchases through an Authorized Apple Reseller, the reseller can load the devices directly into your ABM or ASM account. Learn More.
  2. A device can also be loaded manually through Apple Configurator from a Mac, iPhone, or iPad. Learn more
    1. Note: users have a 30-day provisional period to release devices that were enrolled via Apple Configurator

Apple Configurator - Mac

  1. Plug device to configure into a Mac that has Apple Configurator installed
  2. Select the device and click Prepare
  3. Choose 'Manual Configuration' from the dropdown
  4. Check 'Add to Apple School Manager or Apple Business Manager'
  5. Uncheck 'Activate and complete enrollment'
  6. Setup the MDM Server
    1. Name: name the sever something
    2. Host name or URL:
      1. Beta: https://ios-dev.ensemblemdm.com/
      2. Production: https://gw-ios.ensemblemdm.com/ 
  7. Assign to Organization
    1. Sign into ABM or ASM
  8. Configure iOS Setup Assistant
  9. Choose Network Profile
  10. Apple Configuration will add the device to ABM or ASM
  11. Now the devices can be synced to Ensemble

Apple Configurator - iPhone or iPad

This method will use two Apple devices: one will have Apple Configurator installed and be used to enroll the second iPhone or iPad into Apple Business or Apple School Manager
  1. Setup an iPhone or iPad - with at minimum iOS 16 - with the Apple Configurator application installed. This device will be used to enroll a second device into Apple Business Manager, Apple School Manager or Apple Business Essentials.
  2. The iPhone or iPad to be enrolled should be new out of the box or factory reset so it's in the setup wizard. Then, proceed through the setup wizard as normal until you reach the Choose A Wi-Fi Network page. Pause here.
    1. Note: if you move past the Wi-Fi Network page without using the Apple Configurator app, you must restart the device
  3. Open Apple Configurator and sign in with a Managed Apple ID. This would be the same login credentials used for Apple Business Manager, Apple School Manager or Apple Business Essentials.
  4. Bring the two devices close together, then do one of the following:
    1. Scan the image that appears in Setup Assistant or
    2. Tap Pair Manually in the lower-left corner of the Setup Assistant. Then tap Manual Pairing in Apple Configurator and enter the six-digit code that appears.
      1. Note: If Setup Assistant doesn’t show the pairing pane on the iPhone or iPad you want to add, return to the Home Screen on your iPhone, then tap the Apple Configurator app again.
  5. The serial number and other information about the iPhone or iPad are then uploaded to Apple School Manager, Apple Business Manager, or Apple Business Essentials.
  6. Wait for the process to complete, then tap Erase and Shut Down.
  7. Now the devices can be synced to Ensemble

Sync ABM / ASM Devices with Ensemble


Devices can be added to ABM or ASM by an authorized Apple Reseller or through Apple Configurator.


  1. Go to the Apple Business or School Manager platform
  2. Find your desired device under 'Devices'
  3. Click the ellipsis in the upper right
  4. Select "Edit MDM Server".
  5. Assign the device to the MDM connection created above.
  6. In Ensemble, go to the Devices page
  7. Click the ellipsis in the upper right corner of the devices table.
  8. Click the "Sync from Apple" to import devices from ABM or ASM into the Ensemble company device table.


Manage Automatic Device Enrollment Configurations

Warning: Device enrollment configuration names cannot be edited once the profile has been created.
  1. Create and manage device enrollment configurations under the Apple Automatic Device Enrollment tab.
    1. Configuration Name: a friendly label for the configuration
    2. Department: [Remote management screen?]
    3. Support Phone Number: [Remote management screen?] 
    4. Support Contact Email: [Remote management screen?] 
    5. Auto Advance Setup: skip options during the setup wizard
      1. Accessibility
      2. Action Button
      3. Android: skip option to migrate from an Android device on the Apps & Data screen
      4. App Store
      5. Appearance: skip the Appearance screen which allows the user to choose light or dark mode. [ Maybe Display Zoom? standard or zoomed]
      6. Apple ID: skip the Apple ID screen. The Apple ID is used with iCloud, the App Store and other Apple services.
      7. Biometric: skip the Touch ID or Face ID screen
      8. Device to Device Migration: skip option to migrate from an iOS device on the Quick Start screen
      9. Diagnostics: skip the iPhone Analytics screen. This screen shares data with Apple so they can improve its products and services.
      10. Intelligence
      11. Location: skip the option to enable Location Services
      12. Messaging Activation Using Phone Number
      13. Passcode: skip the Create a Passcode screen
      14. Payment
      15. Privacy: Apple explains the 'Data & Privacy' icon
      16. Restore: Restore for iCloud Backup or from Mac or PC options on the Apps & Data screen
      17. Restore Completed
      18. SIM Setup
      19. Screen Time: skip the Screen Time setup screen
      20. Siri: skip Siri setup screen
      21. Software Update: skip the Keep Your iPhone Up to Date screen
      22. Terms of Service: skip the Terms and Conditions screen
      23. Terms of Address
      24. Update Completed
      25. Voice Selection
      26. Watch Migration
      27. Welcome: skip Welcome to iPhone screen which is the final step of the setup wizard
      28. iMessage and FaceTime: skip the iMessage & FaceTime setup screen

Assign Automatic Device Enrollment Configurations to Devices

  • Either select multiple devices and click the button on the horizontal table row
  • under an individual device's options, there use the 'Assign' action for ADE.