LightSpeed Mobile Management Apple DEP Confusion

[Mr_Jiminy]

I've previously been using Apple Configurator to supervise iPads and deploy apps to the devices. The school is enrolled with the Apple VPP.

 

The local authority have been able to provide the school with access to its own LightSpeed Mobile Manager subscription, which I wasn't going to grumble at. I've recently got the school to enrol with the Apple DEP, the intention being to completely move away from using Configurator.

 

I'm struggling to figure out how to set-up the Mobile Manager and wondered if someone could advice on the best method to set the platform up.

 

Currently we have a small provision of twenty pupil iPad's, supervised using Configurator. There is also a small provision of ten devices assigned to staff, however they have only been configured with manual device based restrictions.

 

Would it be best to set-up two individual groups for pupil devices and staff devices in the LightSpeed Mobile Manager?

 

If so, do I assign the DEP certificate above this or for each group?

 

When I attempt to deploy apps I receive the following message on each of the pupil devices: 'app installation sign in to itunes to allow devices.lsmdm.com to manage and install apps'.

Edited December 4, 2015 by Mr_Jiminy

[howartp]

I can't speak for Lightspeed specifically, but it looks to match our Airwatch environment pretty much the same.

 

We use one Airwatch certificate that we uploaded to the DEP portal (deploy.apple.com) which gives you a token to download back into Airwatch. In Airwatch we have four groups - staff, loans, students and sixth form. The one single cert/token is used at "Top Level" as it calls it.

 

Apple assigns all DEP devices automatically to our one MDM server (Airwatch) then it's up to Airwatch what happens with them - by default they appear in the 'Students' group and get that DEP profile, but we can move them before we dish out iPads.

 

Once the device is setup, it gets the relevant DEP profile automatically (unavoidable) and then assigns further, regular profiles and apps as per Airwatch's configuration.

 

Peter

[Mr_Jiminy]

Sounds like I've started on the right tracks but lost my way with perhaps the set-up.

 

My confusion is when logging into the DEP I'm not sure if I'm meant to upload serial numbers for the devices (see attached screen) grab.

 

 

Sorry, catching a train shortly so may not respond until Monday.[

[howartp]

I thought the same to start with.

 

On the DEP portal, you need to click on 'Mr_Jiminy' at the top right, then 'Institution Details'.

 

In here is your "DEP Customer ID".

 

You need to give that ID to the reseller where you bought your iPads from and ask them to add your order(s) to that DEP account. (They can add old orders as well)

 

You also need their DEP Reseller ID(s), which you need to add to your account in the same place.

 

Once they submit your orders to Apple, you will get an email (on your DEP account) saying they're submitted/processing/available - they will then appear on the DEP portal.

 

You can then click 'Order No', and start typing letters until you guess correctly what the order number begins with (mine starts "S" and bears no resemblance to the order number, invoice number, PO number or anything else on any materials I have - I guess it's the resellers order no with Apple, not ours with the reseller)

 

However it should auto-assign the serial no's to your first MDM server so you shouldn't need to assign them at all - they should automatically appear in Lightspeed's console.

 

One thing to note - do not ever 'Disown' a serial number unless you really are disowning it - you can never add it back again if you do!

 

Peter

[mrnoisy]

I've just done this 340 iPads two weeks ago, Apple DEP and light speed mdm, PM me and I'll happily talk you through it. Or you can give me a call Monday.

Please not DEP does not auto assign serial numbers to light speed unless you set it up first, this is all covered in light speed knowledge base.

[Mr_Jiminy]

Mrnoisy thank you, I'll solider on and drop you a pm if I hit another brick wall.

 

Thanks to you both for the pointers, I'll get the DEP Customer ID over to the reseller this morning, I'd stupidly forgot about that.

 

I'm going to assume once that's in place I'll stop seeing the following message when attempting to deploy apps: 'app installation sign in to itunes to allow devices.lsmdm.com to manage and install apps'.

 

??

[howartp]

I'm going to assume once that's in place I'll stop seeing the following message when attempting to deploy apps: 'app installation sign in to itunes to allow devices.lsmdm.com to manage and install apps'.

 

??

Not until you have signed into iTunes, no.

 

Once you have signed into iTunes, reviewed the T&C's (if it's a new account) and added billing details (either card details or 'None'), then yes you can deploy apps and they just pop up immediately.

 

Apple really need to sort out a mechanism for realising that the device isn't (yet) signed into iTunes - they send all apps immediately once the device is configured, so you get a dozen prompts to sign into iTunes - you've to cancel them all, but they don't then re-prompt; you've to go into LS and re-push them.

 

Peter

[Mr_Jiminy]

Not until you have signed into iTunes, no.

 

Once you have signed into iTunes, reviewed the T&C's (if it's a new account) and added billing details (either card details or 'None'), then yes you can deploy apps and they just pop up immediately.

 

Signed into iTunes?

 

I've signed in DEP - agreed to all T&C's.

[howartp]

Signed into iTunes?

 

I've signed in DEP - agreed to all T&C's.

You cannot install any apps on the iPad until the iPad is signed into a working iTunes/App Store account, whether the device is DEP'd or not. (That's not the case for profiles - you can put those on any time - just apps that don't work due to Apple's core rule that doesn't let apps be installed without iTunes)

 

If the account pre-exists, all you need to do is sign into it. If it doesn't pre-exist, it needs to have billing details, be verified, and T&Cs confirmed.

[mrnoisy]

You cannot install any apps on the iPad until the iPad is signed into a working iTunes/App Store account, whether the device is DEP'd or not. (That's not the case for profiles - you can put those on any time - just apps that don't work due to Apple's core rule that doesn't let apps be installed without iTunes)

 

If the account pre-exists, all you need to do is sign into it. If it doesn't pre-exist, it needs to have billing details, be verified, and T&Cs confirmed.

 

Not entirely true, just saying.

[howartp]

At the time of writing, I believed my reply to be true.

 

If you're referring to Device VPP, that feature has only arrived at AirWatch this week and I wasn't previously aware of it.

 

If you're referring to anything else, please do share your superior knowledge instead of posting completely unhelpful replies.

[mrnoisy]

At the time of writing, I believed my reply to be true.

 

If you're referring to Device VPP, that feature has only arrived at AirWatch this week and I wasn't previously aware of it.

 

If you're referring to anything else, please do share your superior knowledge instead of posting completely unhelpful replies.

 

That's what I love about this forum, so quick with the sarcasm and put downs, if you read the thread the user is using lightspeed, using both DEP & VPP linked to lightspeed MDM, you don't need to use Apple ids on the devices.

I don't have superior knowledge, I've helped the user configure his devices correctly.

[Brimstone]

Device App Assignment has been around since iOS9 was launched in October, it's just that Airwatch are very late to implement this....