Enrolling iOS devices¶
Before you begin, determine if the device is to be enrolled as a Company Owned Device (Supervised) or Bring Your Own Device (BYOD). For more details about each type, see Overview.
Read the following procedure for instructions on enrolling your device type:
Note
You cannot enroll an iOS device until you have configured a APNs certificate. For details, see Configuring certificates and account access.
Enrolling a supervised iOS device¶
Important
For supervised iOS devices, you must have the device physically present. This procedure fully factory-resets the iOS device - make sure you have backed-up any important data before you start.
Follow the steps in each of these sections to enroll a supervised iOS device:
- Prerequisites
- Get the enrollment link from your Coro workspace
- Set up Apple Configurator with server and organization details
- Prepare a device
Prerequisites¶
For supervised iOS devices, make sure you have the following before you begin:
- Your iOS device running version 15 or later, unlocked and powered up, with access to a WiFi network. A factory reset of the device is required.
- A macOS computer running version 10.12.5 or later, with Apple Configurator 2 or later installed.
- A charging cable to physically connect the iOS device to the macOS computer.
- Standard Apple ID and password credentials.
- Access to the Coro Console.
Getting the enrollment link from your Coro workspace¶
Before you can proceed to prepare a device, first obtain the MDM server enrollment link:
-
Log into the Coro console and navigate to the Mobile Device Management module.
-
On the MDM Management page, select the Devices tab:
-
Select + ENROLL NEW DEVICE, then select iOS Device:
Coro displays the Enroll New iOS Device dialog:
-
Choose Company Owned Device (Supervised). Coro displays the Enrollment Configuration step:
-
Select COPY SERVER LINK to copy the provided server link to your clipboard. You need this information later.
Setting up Apple Configurator with server and organization details¶
In this section, you set up a macOS computer with all required software and settings to function as a platform for preparing iOS devices for Coro MDM.
This is a one-time procedure designed to set up your macOS computer with the Apple Configurator tool, details of Coro's MDM server, and information about your organization. These details are applied to each device on which you run the preparation procedure.
On your macOS computer, perform the following steps:
-
Install and run the Apple Configurator app. Download the configurator from this link: https://support.apple.com/apple-configurator.
-
Select Settings... from the Apple Configurator menu.
-
Select Servers:
-
Select the plus icon to add a new server. This starts the Define an MDM Server wizard:
-
Select Next to add the MDM server details:
-
Enter the following details:
- Name: Enter a name for the server. Coro recommends "Coro MDM".
- Host name or URL: Paste the MDM enrollment server link, see Getting the enrollment link from your Coro workspace.
Then, select Next to continue.
-
Apple identifies the server and adds it to your Servers list:
-
Add an organization and supervision identity. Select Organizations:
-
Select the plus icon to add a new organization. This starts the Create an organization wizard:
-
Select Next to continue. Then, when prompted to login, select Skip:
-
Enter details for your organization into the fields provided:
-
Select Next to continue. Apple adds your organization to your Organizations list:
-
To view your organization's supervision identity, select Show Supervision Identity...:
-
Expand the Details section to make sure your Apple Push Notification Services certification is visible in the list, then select OK to close the dialog.
-
Close the Settings dialog.
Preparing a device¶
The following steps describe how to prepare an iOS device for Coro MDM management using the MDM server and organization details previously configured in Apple Configurator:
-
Connect your iOS device physically via a charging cable to the macOS computer and, on the device, agree to "Trust this computer":
-
Open the Apple Configurator app and select your mobile device:
-
Right-click on the displayed device and select Prepare...:
-
In the Prepare Devices dialog, select "Manual Configuration" and enable Supervise devices. Then, select Next to continue:
-
In the Enroll in MDM Server dialog, choose your Coro MDM server from the drop-down list. Then, select Next to continue:
-
In the Assign to Organization dialog, choose your organization from the drop-down list. Then, select Next to continue:
-
In the Configure iOS Setup Assistant dialog, enable the steps you want to appear during the device setup procedure. Then, select Prepare to complete the process:
-
The Apple Configurator app warns that the device was previously prepared. Select Erase to erase the device's current state, apply your settings, and prepare in Remote Management mode:
-
Wait for the device to reset and restart. When your device reaches the Apple Hello prompt, it is safe to disconnect:
Final steps¶
After you complete the device preparation process, you can proceed to distribute the device to your end user.
When your user signs into the device and sets up the WiFi connection, it downloads the enrollment profile and connects to your Coro MDM service.
Your Coro MDM device list is automatically populated with the connected device:
Enrolling a BYOD iOS device¶
Note
For BYOD iOS enrollments, device activation can be performed remotely by the end user if required. No factory reset is needed - the device retains all current data.
Follow these steps to enroll a Bring Your Own Device (BYOD) iOS device:
Prerequisites¶
For BYOD iOS devices, you need:
- An iOS device running version 15 or later, unlocked and powered up, with access to a WiFi network.
- Access to the Coro Console.
Sending enrollment links to your users¶
Before you can enroll a device as BYOD, you first need to obtain the enrollment link and send it to the device's user. Coro enables you to bulk email an enrollment link to one or more users. Alternatively, you can copy the link and paste it directly into a browser on the device.
To access the enrollment link, perform the following steps:
-
Log into the Coro console and navigate to the Mobile Device Management module.
-
On the MDM Management page, select the Devices tab:
-
Select + ENROLL NEW DEVICE, then select iOS Device:
Coro displays the Enroll New iOS Device dialog:
-
Choose Bring Your Own Device (BYOD). Coro displays the Enrollment Configuration step:
-
Enter one or more email addresses in the box provided.
Note
Type an address, then press space or enter to validate it. Or, use commas to separate a list of addresses.
-
Select SEND INVITATIONS to request Coro to send a preformed email template to each address in the list containing instructions and a link to begin the enrollment process.
Alternatively, use the COPY LINK button to copy the enrollment link to your clipboard and paste this into a browser on the device.
Activating enrollment on a device¶
On the iOS device, perform these steps to enroll:
-
Access the invitation email through your iOS device's mail app, and tap the included device enrollment link.
-
When prompted, tap Allow to start downloading a new configuration profile:
-
When complete, tap Close:
-
Now go to your device Settings app, then tap the Profile Downloaded link to access the downloaded enrollment profile:
-
Tap Install on the top right-hand side:
-
Your device may ask you to confirm your passcode or identity in order to continue.
-
A warning page is triggered explaining next steps. Tap Install again:
-
Tap Trust, then wait for the profile to be installed and the device to register with Coro MDM:
-
When this is complete, tap Done:
After the enrollment process has completed, your Coro MDM device list is automatically populated with the connected device: