Welcome to the VMware AirWatch Blog and thanks for reading “7 Questions Answered about AirWatch & the Device Enrollment Program from Apple.” This blog is from 2014, so while it still has some really valuable information, here are some newer resources that you might like:
- You Asked, VMware AirWatch 9.0 Delivered New Capabilities for iOS
- VMware AirWatch Adds New Admin Features for macOS Management
- AirWatch 9.o Webinar Questions Answered
Now, back to the original blog!
What is the Device Enrollment Program from Apple?
The Device Enrollment Program from Apple is designed to help enterprises and educational institutions simplify the MDM enrollment process for IT departments and end-users. The Device Enrollment Program enables enterprises to automatically install MDM profiles onto devices during the initial device setup process as well as supervise iOS devices over-the-air. Prior to the Device Enrollment Program, in order to supervise a device, it had to be tethered via USB to a computer running Apple Configurator. Learn more with Apple’s Device Enrollment Program guide.
What business challenge does the Device Enrollment Program help address?
The Device Enrollment Program solves several critical requirements for corporate-owned devices. Enterprises can now install non-removable MDM profiles. A major concern for IT is the ability for the user to remove MDM from their corporate iOS devices.
Administrators now have more control over devices in supervised mode. Prior to the Device Enrollment Program, administrators had to connect devices via USB to a master Mac to supervise them. Once a device was connected, the device could be placed under supervision through Apple Configurator. Now, with the Device Enrollment Program, devices can be placed into supervised mode over-the-air (OTA) through the AirWatch administrative console.
Since MDM enrollment begins during the initial device setup, enterprises can skip certain setup options entirely and even require end-users to enroll the device. By making enrollment into MDM part of the device setup, Device Enrollment Program simplifies the entire enrollment process, making it easy for non-tech savvy end-users to enroll into MDM. For example, students given a school owned device can simply unbox the device and complete the setup process to enroll into MDM.
What role does AirWatch play in Apple’s Device Enrollment Program?
AirWatch integrates seamlessly with the Device Enrollment Program to provide streamlined enrollment and management benefits. AirWatch allows organizations to automatically import devices into AirWatch directly from your Apple order history. Through AirWatch, administrators can easily configure different settings and apply them to different devices depending on the use case.
AirWatch also enables the following through the Device Enrollment Program:
- Support for staging workflows
- Automatically assign ownership types to different devices
- Pre-assign devices to users and groups to bypass authentication and automatically organize devices
- Full support for other standard device lifecycle and MDM features
How can I join the Device Enrollment Program from Apple?
In order to enroll in the Device Enrollment Program, IT must register your organization’s information with the Apple Device Enrollment Program by navigating to https://deploy.apple.com and creating an account. From there, you can configure your devices for enrollment through the AirWatch administrative console.
Note: To find out if your devices are eligible for the Device Enrollment Program, please refer to the following guide or contact your Apple representative: Apple’s Device Enrollment Program guide.
What are the end-user benefits with the Device Enrollment Program from Apple?
For end-users, MDM enrollment now becomes a familiar user experience and part of the initial device setup. In addition, the Device Enrollment Program drastically reduces the number of post-enrollment steps through the use of silent application installations. Administrators can also easily customize prompts or eliminate setup steps during enrollment to fit their organizations needs.
What are IT benefits?
For IT, manually enrolling thousands of devices is time consuming. However, now with automated enrollment during the device’s setup, end-users can simply enroll into MDM as soon as the device is taken out of the box. With the Device Enrollment Program, the need for a staging or provisioning processes can be completely eliminated and devices can be sent directly to end-users. The Device Enrollment Program enables IT to easily leverage the advanced capabilities of supervision without the need to physically tether a device to a master computer running Apple Configurator – supervision can be turned on with the click of a button OTA. IT also benefits from the avoided risks associated with unmanaged devices. With the Device Enrollment Program, IT can leverage un-removable MDM profiles and even require devices to re-enroll after being wiped or reset.
What do I do if I currently use Apple Configurator?
Organizations that currently use Apple Configurator can choose to transition to the Device Enrollment Program if they desire. However, Apple does not allow organizations to supervise a device with Configurator if that device is registered to a Device Enrollment Program profile. Devices that were previously enrolled into AirWatch MDM with Apple Configurator can be wiped and re-enrolled into the Device Enrollment Program. However, a device should only be given a Device Enrollment Program profile if an organization plans to start enrolling devices through the program.