Adding Devices to Apple School Manager

Adding Devices to Apple School Manager

Apple devices shipped through HuskyBuy are automatically added to Apple School Manager (ASM), which allows them to take advantage of Automated Device Enrollment (ADE). ADE allows for zero-touch provisioning and MDM assignment that persists across operating system installations. If a device is purchased outside of HuskyBuy, it must be manually added to ASM. This requires physical access to the device. Any data on the device will not be preserved during the process. IT professionals that manage Apple devices can use Apple Configurator to add their fleet to ASM.

These instructions closely follow those published directly by Apple. Due to the network configuration at UConn, some steps are slightly different.

Adding a device to Apple School Manager does not fulfill asset tracking requirements for managed workstations. Devices must still be properly added to university inventory management after being added to ASM.

Prerequisites

  • A managed Apple Account with a minimum role of “Device Enrollment Manager.”

  • Wired networking with an adapter for the target device.

  • Activation Locks must be removed from the device, if present. If you cannot remove the Activation Lock, please reach out to techsupport@uconn.edu with proof of purchase. ITS Device Support can work with Apple to remove the Activation Lock.

  • If adding an iPhone or iPad: an iPhone/iPad or Mac with Apple Configurator installed.

  • If adding a Mac: an iPhone/iPad with Apple Configurator installed.

  • If adding an Apple TV: a Mac with Apple Configurator installed.

    • Only Apple TV models with an Ethernet port can be added.

Setting up Apple Configurator

Apple Configurator must first be configured on your host device before adding the target device to ASM.

iOS

  1. Download Apple Configurator from the App Store. This can be done on a managed or unmanaged device.

  2. Open Apple Configurator and sign in with your managed Apple Account.

  3. Open the settings gear and ensure the following parameters are set:

    1. Organization: University of Connecticut

    2. Network Configuration: Don’t Share

    3. MDM SERVER ASSIGNMENT: Default

Mac

  1. Download Apple Configurator from the Mac App Store. This can be done on a managed or unmanaged device.

  2. Open Apple Configurator and navigate to Apple Configurator → Settings… → Organizations.

  3. Click to add a new organization, then sign in with your managed Apple Account.

  4. Select Generate a new supervision identity, authenticate, and continue.

  5. Navigate to Servers, then click to add and save a new server.

    1. Name: Apple School Manager

    2. Enrollment URL: https://myserver.local/devicemanagement/mdm/dep_mdm_enroll

    3. Trust Certificates: (leave empty)

Add a Mac to ASM

Macs can only be added from an iPhone or iPad running Apple Configurator.

  1. Ensure the Mac is fully up-to-date, connected to Ethernet, and is at the out-of-box “Hello” screen.

  2. Proceed to the Select Your Country or Region page and stop there.

  3. With Apple Configurator open on your iOS device, point the camera close to the screen. In a few seconds, a moving image will appear on the Mac. Scan it with your device.

  4. Wait for the process is complete. Then when prompted, shut down or restart the computer.

  5. Wait about 5 minutes for ASM to sync with Jamf and assign the device to its default single-user prestage. If needed, modify the prestage.

  6. Continue with standard enrollment of the Mac. If you are prompted to enroll the Mac into the MDM for University of Connecticut, it was added to ASM properly.

Add an iPad/iPhone to ASM using another iPad/iPhone

  1. Ensure the target device is fully up-to-date, is at the out-of-box “Hello” screen, and that you have an Ethernet connect nearby.

  2. Proceed to the Choose a Wi-Fi Network page and stop there. Do not select a wireless network. If you go too far, restart the device and try again.

  3. With Apple Configurator open on your iOS device, point the camera close to the screen. In a few seconds, a moving image will appear on the target device. Scan it with your device.

  4. When the devices indicate that they are connected, quickly connect the target device to Ethernet. If you do not connect it quickly enough, it will report a failure to connect and will require an erase before it can be attempted again.

  5. Wait for the process is complete. Then when prompted, shut down, restart, or erase the device.

  6. Wait about 5 minutes for ASM to sync with Jamf and assign the device to its default single-user prestage. If needed, modify the prestage.

  7. Continue with standard enrollment of the target device. If you are prompted to enroll the device into the MDM for University of Connecticut, it was added to ASM properly. Stop here unless you are conducting a more in-depth white-glove deployment of the device.

Add an iPad/iPhone to ASM using a Mac

Adding with a Mac can be problematic on an enterprise network. It is recommended that you add with another iPhone/iPad if possible and only add using a Mac if necessary.

  1. Ensure the target device is fully up-to-date, is at the out-of-box “Hello” screen, and is connected to your Mac with Apple Configurator open. If prompted to allow pairing, accept the request.

  2. Find your device in Apple Configurator. Right click it and select Prepare….

    1. Prepare with: Manual Configuration

    2. Add to Apple School Manager or Apple Business Manager: checked

      1. Activate and complete enrollment: unchecked

    3. Supervise devices: checked

      1. Allow devices to pair with other computers: checked

    4. Enable Shared iPad: unchecked

  3. Proceed to the next page and select Apple School Manager as your server. Continue to the next page.

  4. Select University of Connecticut as the Organization. Continue to the next page.

  5. Leave the Setup Assistant to Show all steps. The Jamf prestage will overwrite these settings regardless. Proceed to the next page.

  6. Skip adding a network profile. Click Prepare.

  7. If prompted, authenticate with your managed Apple Account.

  8. When the progress bar disappears, the device should be added. Wait about 5 minutes for ASM to sync with Jamf and assign the device to its default single-user prestage. If needed, modify the prestage.

  9. Continue with standard enrollment of the target device. If you are prompted to enroll the device into the MDM for University of Connecticut, it was added to ASM properly. Stop here unless you are conducting a more in-depth white-glove deployment of the device.

Add an Apple TV to ASM using a Mac

The Apple TV will need to be connected to a display. Apple TV models without Ethernet cannot be added to ASM.

  1. Ensure the target device is fully up-to-date, is at the out-of-box “Pair Your Remote” screen, and is on the same network segment as your Mac, preferably with both directly connected to an unmanaged switch that is connected to the internet.

  2. On the Mac, navigate to Apple Configurator → Paired Devices.

  3. Select the Apple TV from the list then click Pair.

  4. Enter the 6-digit PIN that appears on the screen connected to the Apple TV.

  5. Find your device in the main window of Apple Configurator. Right click it and select Prepare….

    1. Prepare with: Manual Configuration

    2. Add to Apple School Manager or Apple Business Manager: checked

      1. Activate and complete enrollment: unchecked

    3. Supervise devices: checked

      1. Allow devices to pair with other computers: checked

    4. Enable Shared iPad: unchecked

  6. Proceed to the next page and select Apple School Manager as your server. Continue to the next page.

  7. Select University of Connecticut as the Organization. Continue to the next page.

  8. Leave the Setup Assistant to Show all steps. The Jamf prestage will overwrite these settings regardless. Proceed to the next page.

  9. Skip adding a network profile. Click Prepare.

  10. If prompted, authenticate with your managed Apple Account.

  11. When the progress bar disappears, the device should be added. Wait about 5 minutes for ASM to sync with Jamf. Assign the prestage as appropriate.

  12. Continue with standard enrollment of the Apple TV. If you are prompted to enroll the device into the MDM for University of Connecticut, it was added to ASM properly.