The settings that govern the enrollment process of a DEP enabled device is known as the DEP Profile. The DEP profile in ZCC is segregated as follows:
General and Skip Item Settings: Lets you modify the initial setup process of the device. For more information, see Editing General and Skip Item Settings.
Host Certificates: Lets you configure the certificate of the host device to allow pairing of devices. For more information, see Uploading a Host Certificate for Pairing.
On installing ZENworks Configuration Management (ZCM), a DEP profile with default values is assigned to the Apple DEP Devices folder (Devices > Discovered). Subsequently, the discovered DEP devices that appear within this folder inherit the default profile. ZENworks lets you modify this DEP profile as per the needs of the organization. The profile can be modified at the folder level or for a specific device. The modified DEP profile will be applied on only those devices that are to be newly enrolled or are reset to their factory settings.
The updated profile is assigned to the devices in the Apple portal. Before the users begin enrolling their devices, ensure that the modified DEP profile is successfully assigned to the device in the Apple portal. View the Assignment Status of the device by navigating to Devices > Discovered > Apple DEP Devices.
The modified DEP profile is received by the device when the device is activated. Ensure that you do not modify the settings while the users are enrolling their devices. If the incorrect settings are assigned to the device, then a factory reset is required.
To edit the DEP profile at Apple DEP Devices folder level,
Navigate to Devices > Discovered. Click Settings next to the Apple DEP Devices folder.
To edit the DEP profile for a specific device:
Navigate to Devices > Discovered > Apple DEP Devices > <Select a Device> > Settings. To override the DEP Profile settings configured at the folder level and to configure new settings, click Override. Click Revert, to use the inherited settings.
General Settings: The general profile settings are as follows:
Allow pairing of devices with a host computer: Enables the user to pair a device. If set to Yes then the device can pair with any device. If set to No, then the device can pair with only those host devices that have their certificate configured in the DEP Profile.
Set device as supervised: Enables supervision of devices.
Allow user to remove the MDM profile from the device: Enables the user to remove the configured MDM profile. This setting is enabled if the device is set as Supervised.
NOTE:If the device is not Supervised, then the user has the option to remove the MDM profile. If the device is Supervised, it is recommended that you do not enable this setting, as devices cannot be managed if the MDM profile is removed.
Allow user to skip applying the MDM profile on the device: Enables the user to skip enrollment of the device with the MDM Server.
Specify the support phone number displayed during enrollment: Displays the defined customer support phone number.
Specify the support email address displayed during enrollment: Displays the defined customer support email address.
Specify the department name displayed during enrollment: Displays the defined department or location name.
NOTE:The defined phone number, email address, or department name, might not be displayed on some iOS devices.
Skip Item Settings: If selected, the following screens related to initial configuration settings are skipped:
The Passcode screen, which enables the user to create a passcode.
NOTE:If this screen is skipped, then Touch ID and Apple Pay cannot be specified.
The Location Services screen, which helps in determining the user’s current location.
The Restore apps and data options screen, which enables the user to restore data from backup.
The Move from Android options screen, which enables the user to migrate data from an Android device. This option will be disabled, if Restore apps and data is selected.
The Apple ID screen, which enables the user to specify the Apple ID.
The Terms and Conditions screen. If this option is selected, these Terms and Conditions are automatically accepted by the device.
The Touch ID screen, which enables the user to use biometrics to unlock the device or authenticate to apps.
NOTE:Applicable for iPhone 5s, 6, 6+, iPad Air 2, and iPad Mini 3 only.
The Apple Pay setup screen, which enables the user to make digital payments.
NOTE:Applicable for iPhone 6, 6+, iPad Air 2, and iPad Mini 3 only.
The Display Zoom screen, which enables the user to use the standard or zoomed view of the device display.
NOTE:Applicable for iPhone 6 and 6+ only.
The Siri screen, which enables the user to setup Siri.
The Diagnostics screen, which enables the user to send diagnostic data to Apple.
The Display Tone options screen, which enables the user to adjust the white balance on the device display.
NOTE:Applicable for devices that use the True Tone display feature such as iPad Pro.
The Home Button Sensitivity options, which enables the user to specify how the Home button should be used.
NOTE:Applicable for devices that use the 3D touch-enabled Home button, such as iPhone 7.
The Allow pairing of devices with a host computer option appearing in the Editing General and Skip Item Settings, lets iOS devices pair with host devices through the feature called host pairing. If this option is set to Yes then the device can pair with any host device. However, if this option is set to No, then the device can pair with host devices that have their certificates configured in the DEP profile. This certificate should be configured in the DEP profile for the device to continue pairing with the host device.
To upload the certificate at folder level,
Navigate to Devices > Discovered. Click Settings next to the Apple DEP Devices folder. Click Host Certificates.
To upload the certificate for a specific device:
Navigate to Devices > Discovered > Apple DEP Devices > <Select a Device> > Settings > Host Certificates.
On the Host Certificates page, click Add and upload the certificate obtained using Apple Configurator. The certificate files should be in any one of the following formats:
.CER
.CRT
.DER
.PEM