Apple DEP, Profile Manager Problems

[Billhingley]

Hi everyone,

 

I'm having a nightmare with iPads at the moment. I've managed to set up/enroll our iPads into profile manager, pushed apps out to them, signed up to the DEP and VPP programs that's all happy, but students can unenroll the iPads. So my first question was how do I stop this? I did some digging and found out that I hadn't actually enrolled our devices into the DEP program, so I tried to enter some serial numbers of some iPads and was told they were incorrect. I then realized the name of our Mac server in the DEP was wrong so deleted it and came to re-add it but I need to download a public key from somewhere.

 

Does anyone know where I can download this public key from and would enrolling the iPads in the DEP stop students from unenrolling the iPads?

 

Any help in this would be greatly appreciated.

 

 

Thank you.

[cburrows]

we had kind of the same issue, We had to get the company we bought the ipads from to add the serials to the dep program. then when we wanted to manage them we entered the serial and it registered it with DEP. (at least I think that's how it worked), we also had a couple with broken screen which got sent for repair and since they have come back we cant manage them as they are different ipads to what we had. Just thought I would let you know of that issue.

Regarding Unenrolling, I am not sure as we have had to reset some ipads by holding the power and home button but it pops up asking to connect to iTunes, so not sure if students would be able to.

not sure what the public key would be other than your wifi SSID password

Hope this helps,

[Brimstone]

When you enroll into DEP you have exchange public and private certificates with your choice of MDM so that both are linked. You download the cert from the DEP portal and upload the cert from your MDM. Once enrolled when an iPad is reset and activated it gets automatically enroled into your MDM with a supervised non removable profile (as long as you have set this in the MDM)

 

Any iPad that requires replacing or serviced MUST be done through an Authorised Apple Service Provider via Apple's Global Exchange (GSX) so that the replacement iPad automatically appears in your DEP portal, serviced anywhere else is this will not happen.

 

If you unenrol an iPad from DEP it CAN NOT be re-enrolled in DEP, the help guide below has more....

 

https://help.apple.com/deployment/programs/#/tes1c1be359d

[Billhingley]

Thanks for the reply. I've downloaded the cert from the DEP and uploaded it to our MDM, but when I come to put a serial number into the DEP I'm told the serial number is incorrect, which is impossible as I copied it directly from the page in Profile Manager. Any ideas with this error?

[Brimstone]

I presume you have put in a DEP request to your reseller then...?

[Billhingley]

I've phoned them up and asked for their seller ID (cant remember the name of the number) and have got them listed in DEP as our supplier. Do I need something more from them?

[Brimstone]

You need to give them your DEP User iD and ask them to send a DEP request to Apple...