Dell Mobile Management
Contents Dell Mobile Management 3 Setting up the 3 DMM Device Deployment Program Prerequisites 4 Configure Apple VPP Token in DMM 5 Download Apple VPP Token 5 Assign VPP App Licenses 7 Configure Virtual MDM 7 Add A Profile 10 General Settings 10 Device Management Settings 11 Device Management Settings 11 Assign a Profile to Devices 12 VPP Enrollment for Mobile Users 13 Enroll a Device 14 Operational Considerations 15 About 16 About Dell 16 Technical Support 16 Trademarks 16 Restricted Rights 17 Ordering Information 17 About This Guide 17 End User License Agreement ( License ) 18 Copyright 19 Company Information 19 About Dell Software 20 Contacting Dell Software 20 Technical support resources 20 2
Dell Mobile Management Setting up the Apple Device Enrollment Program The (DEP) is a part of the Apple Deployment Program that helps businesses and educational institutions easily deploy and configure ios and OS X devices. DEP provides a fast, streamlined way to deploy institutionally owned ipad and iphone devices and Mac computers that are purchased directly from Apple or participating Apple Authorized Resellers or carriers This document gives you an overview of the program features, explains how to enroll, and helps you get started. More detailed and in-depth instructions are provided in the Administrator Guide. For product and solution details (including technical specifications and support), see the Dell Enterprise Mobility Management Solution https://support.software.dell.com/mobile-management/release-notes-guides. DEP simplifies initial setup by automating Mobile Device Management (MDM) enrollment and supervision of devices during setup, and enabling you to configure the devices without touching them. To further simplify the process, you can skip certain Setup Assistant screens so users can start using their devices right out of the box. This guide provides instructions for setting up the Apple Deployment Program (ADP) as part of Dell Mobile Management included with the Dell Enterprise Mobility Management. For product and solution details (including technical specifications and support), see the Admin Guide or the Dell Enterprise Mobility Management Solution https://support.software.dell.com/mobile-management/1.5. Throughout this document, select the DMM URL for your region: https://us1.cloudclientmanager.com for the US/Caribbean region or https://eu1.dellmobilitymanager.com for the EMEA region. 3
DMM Device Deployment Program Prerequisites The Apple Volume Purchase Program (VPP) is used to distribute paid ios apps to ios devices using licenses purchased from an Apple VPP account and to generate a VPP Token that Dell Wyse Cloud Client Manager will use to update license usage information with Apple. You must be enrolled in the Apple Deployment Program. You can only register devices that have been purchased directly from Apple. APNS must be configured in (DMM). This is the Apple MDM Push Notification Certificate. Mobile User accounts must be in DMM. You must be a designated Global Administrator in DMM. A Cloud Client Manager (CCM) PRO Tier license is required to manage apps and an administrator with Global Administrator role is required to configure the VPP Token. An Apple ID must be associated with the Apple VPP account and the token must be renewed annually. Each Cloud Client Manager user account should be linked to a unique Apple ID. It is highly recommended to use a corporate Apple ID account and not a personal account. A VPP Token for your Apple VPP account. For more information on the Apple VPP program see https://vpp.itunes.apple.com. Distributing paid ios apps is supported for devices running ios 7 and later. 4
Configure Apple VPP Token in DMM In order to distribute paid ios apps, an Apple VPP account must be created for the organization and a VPP Token must be uploaded to (for details on the Apple VPP account see https://vpp.itunes.apple.com). The VPP Token is used to sync license usage information with Apple. NOTE: The token needs to be renewed whenever a new token is generated from the Apple VPP account - it is also required to be renewed each year. To configure the VPP token, you will 1. Download the Apple VPP Token 2. Assign VPP App Licenses 3. Configure your virtual MDM 4. Add a profile 5. Assign profile to devices 6. Enroll a device Download Apple VPP Token 1. Open https://vpp.itunes.apple.com then click the Business Volume Purchase Program button. 2. Enter your Apple ID and Password then click Sign In. 3. On the Volume Purchase Program screen, click Account Summary. 4. 4. From the Managed Distribution section, click Download Token to save the text file (.txt) containing the VPP Token. 5
5. Sign in to DMM and click Portal Admin > Apple VPP. 6. Click Upload New VPP Token. DMP displays the Upload VPP Token screen. 7. 7. Click Browse... to select the VPP Token.txt file downloaded in the previous step. Optionally, enter the Apple ID used to configure this account, as a reference. 8. Click Upload VPP Token to complete the configuration of the Apple VPP Token with DMM. Once the token has been uploaded, the Apple VPP page will display the expiration date for the current VPP Token. It will also have options for renewing the VPP Token and syncing the VPP licenses and users. Use Sync VPP licenses to update the purchased and assigned app licenses and Sync VPP Users to sync user registration and usage status. 6
Assign VPP App Licenses The VPP licenses are automatically assigned to users and devices when required. To configure a paid ios app: 1. In DMM, click Apps & Data. 2. Click Add Apps. 3. Use the Search Type, Device Type, and Country fields to search for the app you want to add. 4. Locate the app in the displayed list and check the checkbox beside the app name. 5. Click Add to Inventory. 6. To configure the app as a managed app, go to Apps & Data then Mobile Policies. Select the app and click Edit Policy. 7. Set the app policy as needed and click Save. Configure Virtual MDM 1. Log in to the Apple DEP program at https://deploy.apple.com. You will receive a code on your phone in order to complete the two-step authentication process. 2. Click Add MDM Server. 7
3. Enter an MDM Server name. 4. Upload the Public Key from Step 3. 5. Download your server token. 6. In DMM, click the Portal Admin tab. 7. In the Console Settings list on the left, click Apple DEP. 8. On the Add DEP Token screen, click Browse to locate and select the Server Token from Step 5. 9. Click Upload Server Token. 8
10. Log in to your Apple DEP at https://deploy.apple.com. You will receive a code on your phone in order to complete the two-step authentication process. 11. On the Apple DEP Portal, click Manage Devices. 12. Assign the devices to your server by serial number. 13. Click OK then, on the confirmation window, click OK. The assigned devices will now display under the Apple DEP # OF ASSIGNED DEVICES column... 9
and in the Devices tab. Add A Profile 1. In DMM, click Portal Admin. 2. In the Console Settings area on the left, click Apple DEP. 3. Click the profile name displayed (Test Server 1 in the following screenshot example). 4. On the DEP Server Details screen, click +Add Profile. DMM displays the DEP Profile screen in three sections where you will identify the new profile then select and unselect the desired settings. General Settings 10
1. In the Profile Name textbox, enter a descriptive name for this profile. 2. In the Department/Location textbox, enter a name for this department/location (optional). 3. In the Support Phone Number textbox, enter a phone number users can call to get help (optional). Device Management Settings 1. To force the device to be managed by an MDM before being set up, select the Make MDM Profile Mandatory during Device Setup checkbox. 2. Selecting the Set Device as Supervised checkbox provides a greater control over the devices by adding Supervised payloads. 3. Selecting the Allow User to Remove MDM profile from Device Settings checkbox allows the user to remove the MDM profile and become unmanaged. 4. To allow devices to be synced with itunes, check the Allow Device Pairing with PC/Mac (itunes/ipcu) checkbox. Device Management Settings 1. To disable Location Services during device activation, check the Skip Location Services checkbox. 2. To disable restoring from backup during device activation, check the Skip Restoring from Backup checkbox. 3. To disable signing in to Apple ID and icloud during device activation, check the Skip AppleID and icloud Sign in checkbox. 4. To skip Terms and Conditions during device activation, check the Skip Terms and Conditions checkbox. 5. To disable Siri during device activation, check the Skip Siri checkbox. 6. To disable automatically sending diagnostic information during device activation, check the Skip Automatically Sending Diagnostic Information checkbox. 7. To hide and disable the passcode pane, check the Skip Passcode checkbox. 11
8. Click Save. The new profile now displays in the DEP server details table. Assign a Profile to Devices 1. In DMM, click the Portal Admin tab. 2. In the Console Settings list on the left, click Apple DEP. 3. Click the profile name displayed (Test Server 1 in the following screenshot example). 4. Click the Devices tab (not the top-level Devices menu). 5. Select one or more devices and click Assign Profile. 12
6. From the Select Profile drop-down list, select the desired profile. 7. Click Assign Profile. The profile is now assigned to the device as shown in the Assigned Profile column. VPP Enrollment for Mobile Users In order for users to receive managed apps distributed to them from the Apple VPP program, users must first accept the terms of the program to associate their itunes account with the corporate Apple VPP account. This only needs to be done once and not per-managed app. To facilitate this process, once a paid managed app is associated to a device owner for which the VPP license is attributed, Cloud Client Manager will verify the status of the user. If the user is not already associated, the user will receive an email invitation requesting he associate his itunes account. It is recommended that the user access the email and click the link from an ios 7 device (however, the user can also do this process from a machine with itunes installed). Once the user accepts the terms and enrolls in the VPP program, his VPP Program Status will show as Associated in Cloud Client Manager (from the User Details page). If for any reason the VPP enrollment email needs to be resent, there is also a Send VPP Email button from the User Details page. 13
Enroll a Device 1. Turn on the DEP Device. 2. Follow the device activation steps. The steps depend on the DEP profile settings. See Add a Profile. 3. Sign in with a valid DMM username and password. 4. Pre-configured DEP profiles will get installed on the device and pre-configured DEP applications will get pushed to the device. 14
Operational Considerations Each Cloud Client Manager user account should be linked to a unique Apple ID. Multiple devices can be linked to a given Cloud Client Manager account; however, different Cloud Client Manager accounts should not share a single Apple ID account, otherwise there may be issues automatically assigning paid ios apps to the CCM accounts. In that case, the workaround is for the user to manually install the app from the device. In some cases, it may take quite some time (e.g., over 20 minutes) for the VPP app license to be assigned to the user's Apple ID from the Apple VPP program. In that case, the app can not be automatically be pushed to the device. The workaround is for the user to manually install the app from the device once the license is assigned by Apple. 15
About (DMM) provides IT administrators with a tool to help securely manage and enable corporate access to a wide range of solutions and devices including thin clients, zero clients, cloud devices, workspace applications, smartphones, and tablets. DMM provides visibility not only into managed devices, but also insight into which employees have used them and what IT assets have been accessed. DMM is available from any location through standard Web browsers over the Internet. About Dell Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information on DMM, visit our support portal at http://software.dell.com/products/mobile-management/. Technical Support To access Dell Enterprise Mobility Management technical resources (create a Service Request), visit https://support.software.dell.com/create-service-request. NOTE: You must register with Dell Support to place a service request. New to Dell Software Support? Check out the Getting Started section of Dell Software Support at https://support.software.dell.com/essentials/getting-started. If you still need help, call Technical Support at 1-800-306-9329 (toll free in U.S. and Canada) or 949-754-8000 or 949-754-8080. Hours of operation are from 5:00 A.M. to 5:00 P.M. Pacific Standard Time, Monday through Friday. Trademarks The Dell logo is a trademark of Dell Inc. Other product names mentioned herein are for identification purposes only and may be trademarks and/or registered trademarks of their respective companies. Specifications subject to change without notice. 16
Restricted Rights You acknowledge that the Software is of U.S. origin. You agree to comply with all applicable international and national laws that apply to the Software, including the U.S. Export Administration Regulations, as well as enduser, end-use and country destination restrictions issued by U.S. and other governments. For additional information on exporting the Software, see http://www.microsoft.com/exporting. Ordering Information For availability, pricing, and ordering information in the United States and Canada, call 1-800-438-9973 or visit us at Dell.com. In all other countries, contact your sales representative. About This Guide This guide is intended for system administrators. It provides instructions for setting up the Apple Deployment Program (ADP) as part of the Dell mobbile Management included with the Dell Enterprise Mobility Management. This guide is a companion document to the more comprehensive and detailed Dell Mobile Management Administrator Guide. 17
End User License Agreement ( License ) A copy of the End User License Agreement is included in the software and provided for your reference only. The License at http://www.dell.com/wyse/licenses as of the purchase date is the controlling licensing agreement. By copying, using, or installing the software or the product, you agree to be bound by those terms. 18
Copyright - Apple Deployment Program v1.0 - September 2015 2015 Dell, Inc. All rights reserved. Dell,, and DMM are trademarks of Dell, Inc. All other product or company names may be trademarks of their respective owners. This documentation (and the software described herein) is provided based on your prior agreement to a license agreement governing its use. This document and the software and firmware described in it are copyrighted. You may not reproduce, transmit, transcribe, store in a retrieval system, or translate into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, any part of this publication without express written permission. A copy of the licensee agreement can be found on the web (for individuals) or in the signed written agreement between you, or your company, and Dell, Inc. (and/or its resellers and distributors). Company Information Dell, Inc. 1 Dell Way Round Rock, TX 78682 512-338-4400 http://www.dell.com 19
About Dell Software Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information, visit www.software.dell.com. Contacting Dell Software Technical Support: Online Support Product Questions and Sales: (800) 306-9329 Email: info@software.dell.com Technical support resources Technical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions. To access the Support Portal, go to http://software.dell.com/support/. The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the portal provides direct access to product support engineers through an online Service Request system. The site enables you to: Create, update, and manage Service Requests (cases) View Knowledge Base articles Obtain product notifications Download software. For trial software, go to Trial Downloads. View how-to videos Engage in community discussions Chat with a support engineer 20