How to enroll Macs using an MDM for education

How to enroll Macs using an MDM for education

Mosyle Team
written by Mosyle Team


The Mac deployment and management process has its own specificities, so it’s important to learn about some steps that will streamline this process in your school. The first thing to do is to enroll your macOS devices in an MDM made for education.

In this guide, you will learn how to set up and deploy your school's Mac computers using the Mosyle Manager MDM solution. This guide aims to facilitate and clearly explain the steps involved to enroll and deploy Macs to the IT team. After deployment, your computers can be managed directly through the Mosyle Manager Web Panel.

There are multiple ways to configure or register your Mac computers in Mosyle. We suggest using one of the following two options: Enrollment URL, or Apple’s Device Enrollment Program (DEP).

How to enroll a Mac computer using URL

You can register your Mac computers manually using a URL provided by the Mosyle Manager MDM solution. For non-DEP devices, our suggestion is to use the limbo enrollment method.

To start, log in to your Mosyle Manager account and navigate to Preferences > MDM Platforms > select macOS and check the URL in the highlighted box on the right. Type this URL into a web browser on the Mac you want to enroll, and complete the process to install the management profile.

When you enroll your macOS device in limbo status, it means the device is enrolled in the Mosyle Manager MDM but has not been assigned to a user or laboratory. You can later assign the Mac computer to any student or teacher, or even a shared group or lab. If you use our MDM made for education, Mosyle Manager, navigate to the My School area and assign the devices in the way that best meets your school's or district's needs.

How to enroll a Mac computer using your DEP account

Apple’s Device Enrollment Program (DEP) is the quickest way to enroll your Mac computers in an MDM server. If your devices are eligible, and your school has a DEP account, you’re already halfway there.

Remember: The DEP and Apple School Manager (ASM) are now integrated in a single platform, so you should access your account through the Apple School Manager portal. By using these Apple programs, you can automate the supervision process and the device enrollment in the MDM solution. In other words, DEP simplifies the initial setup by automating device enrollment in the MDM during the configuration, allowing you to manage devices with zero-touch.

The steps to integrate the DEP/ASM account with the Mosyle Manager MDM server are the same as those for iOS. First, you need to associate your DEP/ASM account to the MDM server. To do this, log in to our DEP or ASM account, click MDM Servers > + Add MDM Server, and fill the field with the name of your MDM provider. If you are using our MDM for education, just type “Mosyle Manager”.

Then, download the Mosyle Manager public key from your Mosyle account in the Apple Integration area within the My School tab.

With the Mosyle Manager public key downloaded, go back to your Apple DEP/ASM account and register the public key under Upload your Public Key > Upload File.

Next, download the generated Apple server token with the file extension p7m. Return to your Mosyle Manager account and upload the Apple server token. To complete integration, click Save.

In order to manage your Mac computers in an MDM solution, your devices must be associated with your Apple service account.

You can assign devices to your MDM servers within your ASM account using the device serial number or order number, or by uploading a comma-separated value (CSV) file that contains a list of all unassigned device serial numbers.

In your DEP/ASM account, go to: Devices Assignments > Assign by Serial Number/Order Number/CSV file > Assign to the Mosyle Manager MDM Server.

Now, it’s time to set the configuration preferences for your devices! If you use our MDM for education, log in to your Mosyle Manager account and navigate to My School to create your DEP profile. Select your configuration preferences and select which devices will receive the settings, then click Save.

How to complete the enrollment process of a Mac

If your devices have previously been used, you need to reformat the hard drive in order for the new DEP configuration profile to be applied. To do this, follow the steps below on the Mac you want to enroll:

Tip: If you are migrating from another mobile device management solution to Mosyle Manager MDM, you may be able to send a remote wipe command from your former MDM platform to all of your devices.

Using Terminal Commands

If your devices are running macOS Sierra (OS 10.12) or later, you can use Terminal Commands to apply the new DEP configuration profile. To do this, follow the steps below on the Mac you want to enroll:

Brand new devices

If your devices are brand new and have never been used or turned on, simply take the Mac out of the box and turn it on. All configuration settings from Mosyle MDM will be applied.

After devices have been enrolled in the Mosyle MDM, you can see them listed in your Mosyle Manager account by going to My School > DEP > Click on your account > List Devices of this Account. These devices will now have a green line to indicate they are enrolled in the MDM.

Get started with the new way for managing Apple devices in your school!

Save countless hours of IT effort while empowering teachers to manage iPad, Mac, and Apple TV devices in the classroom

2020 Mosyle™ Corporation |  Trusted by 14,000+ educational institutions across the globe