topic Add Secure Endpoint (AMP) to iPhones with MDM in Endpoint Security

Add Secure Endpoint (AMP) to iPhones with MDM

hank hale — Tue, 07 Jan 2025 01:33:27 GMT

I am attempting to add Secure Endpoint (AMP) with our MDM, Mosyle, all the mobile devices are iPhones. I have the Cisco Security Connector downloaded to test devices with the MDM. In Secure Endpoint, I select Management > Deploy Clarity for iOS > select our policy > Download profile. I copy that to the PLIST in the MDM. I am sure the PLIST is put in correctly on the MDM, but we are not getting any movement or syncing inside of the secure endpoint dashboard.

Am I doing something wrong? Do you all have any guidance on getting this to work?

Thanks,

Hank

Re: Add Secure Endpoint (AMP) to iPhones with MDM

Chris05 — Wed, 15 Jan 2025 20:29:48 GMT

Hi Hank,

Are your iPhones supervised? We have this deployed to all our iOS devices, at first it was just iPads until we got our iPhones enrolled with Apple's School/Business manager as well.

Re: Add Secure Endpoint (AMP) to iPhones with MDM

hank hale — Wed, 15 Jan 2025 22:56:29 GMT

Hi Chris,
Thanks for replying. Yes, we do have them in Apple Business Manager, as well as the MDM. I confirmed via the business phone that it is supervised . Since you do have a successful deployment, could I ask how you got the profile added? Did you do to Deploy Clarity for iOS > select the profile > download profile? (Picture 1). Or did you go from Polices > policy needed > xml ? (Picture 2)

Thanks for the guidance!

Re: Add Secure Endpoint (AMP) to iPhones with MDM

Chris05 — Thu, 16 Jan 2025 13:51:16 GMT

Apologies, it's been years since we originally set it up so I don't remember exactly - but I think you need to do both. We first uploaded the .mobileconfig profile to our mdm (WorkspaceOne). Also, I can see in our mdm iOS profile that we then uploaded the .xml file. Basically, the first one is an organization profile, the second is the device profile.

Re: Add Secure Endpoint (AMP) to iPhones with MDM

hank hale — Fri, 17 Jan 2025 04:32:28 GMT

Thanks Chris! That was the issue. I didn't have the mobileconfig in a root profile. I fixed that and now it works. Thank man!