Apple DEP Help!!!

[DarkenRahl]

Hi All

 

Was wondering how useful DEP is going to be to us. I have it set up but can't see how it makes things easier.

 

We currently use configurator to set up iPads and during the rebuild process we manually input one of a few apple IDs we use for the trolley (1 Apple ID per 10 devices) along with the password. We also use configurator to get an initial SSID pushed to each device with a horribly long password for the iPads. Once they have the wireless key from configurator and can get to the internet, they then communicate with Meraki MDM and pull down apps and further settings.

 

So essentially the configurator part was just being used to get the wireless details to them to allow them to talk to Meraki and the internet. We always had to type in the Apple ID bit manually for each rebuild.

 

If we go DEP i take it we can't use configurator. So... if we delete the device and want to rebuild it we have to manually input not only the Apple ID email and password during setup, but also the awfully long wireless key. Is that right? How is that Zero touch?

 

Apologies if i am completely getting it wrong. Anyone able to enlighten me? Do you all have SSIDs with no passwords they all connect to? Do any of you also set up a few or even a single Apple ID to push the apps to? How do you get round these things? Are you all typing them in manually on each device as the kids screw them up and they need resetting? No matter how much we nail down in restrictions they always manage to mess about with them.

 

Thanks

[smithson83]

Sorry to hijack, but I too would love to know more about the DEP process.

If anyone has a workflow they would be willing to share, that would be great.

[Simcfc73]

I eventually got my DEP logon from Apple after having to create a new ID, create 2 step authentication, answer some questions on the phone to confirm I was eligible to do this and sell my first born.

 

I have now got a DEP option on my deploy.apple.com logon (woohoo) and its syncing with Meraki (woohoo) but no devices are showing up. I am sure its something I have missed.

 

BLAH BLAH BLAH

Edited March 30, 2015 by Simcfc73

[smithson83]

Are we all invited to the ritual ignition...

[Brimstone]

I eventually got my DEP logon from Apple after having to create a new ID, create 2 step authentication, answer some questions on the phone to confirm I was eligible to do this and sell my first born.

 

I have now got a DEP option on my deploy.apple.com logon (woohoo) and its syncing with Meraki (woohoo) but no devices are showing up. I am sure its something I have missed.

 

BLAH BLAH BLAH

 

Enrolling into DEP requires the following;

 

An MDM (Apple Configurator is not an MDM solution, so if you are using this you can't use DEP)

iPads have to have been purchased via Apple direct or a reseller that is registered with their own DEP Reseller ID, you then have to contact them to make the request on your behalf for DEP enrolment. If they are not registered for DEP then you are out of luck and can't enrol the iPads into DEP.

To enrol the iPad you have to reset it back to factory settings so iPads will be wiped of any data on them. As each iPad requires connection to the network to start the enrolment process if you have hundreds of them you are better off setting up a guest non password protected wifi network so end users can connect and get enroled into your MDM themselves.

[Simcfc73]

Just been on the phone with apple, was told I needed to give the dep enrolment number to the store when I purchased them so I need a time machine. They are only 18 months old so within the 3 year time scale. This is the info I was given but he is going to call me back and see if he can force the enrolment. I followed all the instructions, just wanted a play really..i use Meraki mdm by the way.

[Brimstone]

Just been on the phone with apple, was told I needed to give the dep enrolment number to the store when I purchased them so I need a time machine. They are only 18 months old so within the 3 year time scale. This is the info I was given but he is going to call me back and see if he can force the enrolment. I followed all the instructions, just wanted a play really..i use Meraki mdm by the way.

 

I heard a rumour that Apple Retail Stores are not yet set up for DEP. Any purchase made within the 3 years can be enrolled so whoever you are talking to doesn't seem to know the first thing about DEP. I've just helped a school enrol about 200 iPads which were bought in around 2012. Once you have the reseller ID you then add this to your DEP portal page, you can add more than one reseller as this school had bought the iPads from 3 resellers over various points.

[Simcfc73]

It was a Apple techie that I spoke to.. on the DEP I have Apple Direct as the reseller which is where I got them from.

[Simcfc73]

Got a reply from the store.

 

The Device Enrollment Program is currently only available for new orders purchased through an account in store, as they have to be ordered and processed as a DEP order at the point of purchase

 

So I am stuck unless they change it.

 

I will not comment on how I feel about this.

[Brimstone]

Got a reply from the store.

 

The Device Enrollment Program is currently only available for new orders purchased through an account in store, as they have to be ordered and processed as a DEP order at the point of purchase

 

So I am stuck unless they change it.

 

I will not comment on how I feel about this.

 

Was this purchase made from an Apple Edu account with Apple in Ireland or a retail store local to you?

[Brimstone]

I would email this quote back to them, this comes from the DEP guide on the web site and has been done already by myself with schools with previously purchased devices from other resellers not Apple though...

 

Step 3: Assign devices. You can assign devices to your virtual MDM servers by order number or by 


serial number. Only eligible devices will be available for assignment to your MDM server on the program 
 website. You can search for orders you placed directly with Apple after March 1, 2011, by order or by serial number. If you’ve placed orders from a participating Apple Authorized Reseller, your look-back period will be at the discretion of the reseller. Within 24 hours after the reseller successfully posts your order to the DEP program.

[Simcfc73]

I think the guy from Apple support said it wasn't available in stores yet... but couldn't give a time from or if it will ever be available. It was my one and only purchase of 20 iPads, I didn't want to buy a mac just for managing them. I thought I was buying them from Apple Edu but the receipt says Apple retail ( I got a EDU discount). I know what's coming now, I can't use these as I got them from the wrong place. I am not having a go at Apple for the sake of it, just think its silly they have restrictions for no reason on legitimate purchases.

[DarkenRahl]

So we created an SSID with a basic password for quick enrolment. The actual Wifi in the MDM profile for the school that we want them to use day in and day out is also configured. It connects to the basic SSID, I manually type in the apple ID i want it to use and then it starts to download my apps..... It stays on the basic SSID used to enrol though and never "flips" across to the one in the Meraki MDM profile. Do i now have to manually forget this WIFI and hope it just connects to the other one? If we have to connect it to Wifi manually then swap it across to the one we actually want to use that seems a right pain.

 

Anyone else have a suggestion as to how they are doing these things? I don't want to have to type in a long secure password each time we set one up and I don't want to leave them on some really basic quick non passworded wifi either.

[jonnykewell1]

I'm going through this process at the minute. Got my enrollment id, spoke with apple to answer their questions and now i'm waiting for them to ring the school business manager to probably ask the same questions. Once this is done I should hopefully have access. I too am using Meraki so I will keep an eye on this thread and post any of my findings. I've made made an email account per ipad so that I can make 30 itunes accounts. That way I can do the licencing properly for the apps.

[DarkenRahl]

We used 10 devices per Apple ID and it has been working so far without prompts all the time. Not sure if we could use only 1 but i recall seeing in iTunes that you can only manage so many devices so didn't risk it.

[Brimstone]

We used 10 devices per Apple ID and it has been working so far without prompts all the time. Not sure if we could use only 1 but i recall seeing in iTunes that you can only manage so many devices so didn't risk it.

 

Using 10 devices per Apple ID will give you problems, you should be using a unique Apple ID per device, this will fail when you come to managed distribution invites to users and silent installation of apps.. The reason this is working is you have automatic downloads turned on and the install prompt is not coming from the MDM but the App Store so the apps are not being managed via the MDM..

[Brimstone]

So we created an SSID with a basic password for quick enrolment. The actual Wifi in the MDM profile for the school that we want them to use day in and day out is also configured. It connects to the basic SSID, I manually type in the apple ID i want it to use and then it starts to download my apps..... It stays on the basic SSID used to enrol though and never "flips" across to the one in the Meraki MDM profile. Do i now have to manually forget this WIFI and hope it just connects to the other one? If we have to connect it to Wifi manually then swap it across to the one we actually want to use that seems a righ pain.

 

Anyone else have a suggestion as to how they are doing these things? I don't want to have to type in a long secure password each time we set one up and I don't want to leave them on some really basic quick non passworded wifi either.

 

The iPad needs to seen by you as listed in your DEP portal then on activation as long as the correct wifi details are in your Meraki prolife this would switch over.

 

I presume you have requested DEP enrolment from the reseller you bought them from first?

[biz]

So we created an SSID with a basic password for quick enrolment. The actual Wifi in the MDM profile for the school that we want them to use day in and day out is also configured. It connects to the basic SSID, I manually type in the apple ID i want it to use and then it starts to download my apps..... It stays on the basic SSID used to enrol though and never "flips" across to the one in the Meraki MDM profile. Do i now have to manually forget this WIFI and hope it just connects to the other one? If we have to connect it to Wifi manually then swap it across to the one we actually want to use that seems a right pain.

 

Anyone else have a suggestion as to how they are doing these things? I don't want to have to type in a long secure password each time we set one up and I don't want to leave them on some really basic quick non passworded wifi either.

 

Now that the Meraki profile is on the device it should have all the WiFi settings available to it somewhere in its tiny brain. What happens if you stop broadcasting the simple SSID? Do they flip over then?

 

We're just starting down this path, so you're findings will be very useful. Cheers.

[jonnykewell1]

Hi all. I've invited all my user account from meraki for the VPP section. I've logged in and accepted the terms but all users are still showing as "invited" instead of "associated" any ideas?

[biz]

Hi all. I've invited all my user account from meraki for the VPP section. I've logged in and accepted the terms but all users are still showing as "invited" instead of "associated" any ideas?

 

Have you forced a sync?

[Brimstone]

Hi all. I've invited all my user account from meraki for the VPP section. I've logged in and accepted the terms but all users are still showing as "invited" instead of "associated" any ideas?

 

 

Users need to sign into their Apple ID not just accept the invite...

[jonnykewell1]

Thanks guys, it was the sync that I hadn't done.

[biz]

Thanks guys, it was the sync that I hadn't done.

 

I guess an automatic sync would happen at some point as the button is labelled "force sync now", but I've never left it long enough to find out how often that happens. I'm always too impatient and force the sync

[jonnykewell1]

I'm now approved onto the DEP system, but now i'm having to wait again for a few days before I can turn on two Factor authentication. Frustrating as i've already does this for the VPP and it's technically the same account.

[Brimstone]

I guess an automatic sync would happen at some point as the button is labelled "force sync now", but I've never left it long enough to find out how often that happens. I'm always too impatient and force the sync

 

 

Most MDM's poll the VPP store using the token you downloaded and pasted about once per hour.....