Guide Request : Adding iOS11 device to Apple DEP via Apple Configurator 2.5+

[PeterJames1]

Could I please be provided the subject line guide.

Thank you,
Peter James

[PeterJames1]

Sorry I forgot to add, there is already a Apple Configurator 2.0 Guide:
https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_and_Supervising_iOS_Devices_using_Apple_Configurator_2.0_or_Later

I just feel one relevant to iOS11 updates would really help the community.

Thank you,
Peter James

[robby_barnes]

Agreed, some additional documentation would be nice!

I tried this out today on several devices though and it was super easy and worked really well!

[PeterJames1]

I am having some difficulty with this.

Has anyone got the device added to their DEP account?

Thank you,
Peter James

[PeterJames1]

Just to expand on the below:
- I have added the Meraki Server (from the AC2+ URL - See Guide above)
- I have also added our server

Working with a factory reset iPod:

- Prepare Devices (Options ticked: Add to DEP, Active and complete enrolment, Allow devices to pair)

- Select Meraki Server above

- Select new Organisation (Log on with our Apple DEP / Administrator account): No issue.

- Create an Organisation: Generate a new supervision identity

- Setup Assistant: Don't show any of these steps

- Choose Network Profile - Profile: None

- Automated Enrolment Credentials: Unsure what these refer to. Description "Provide the user name and password to use when enrolling in the MDM server, if needed". Assumed these to be our Apple DEP / Administrator account again.

(With our without the above optional user/pass entered I get the same error)

Device prepared:
- Waiting for the device
--- START OF ERROR ---
Error: Provisional Enrollment failed.

Network communication error.
[MCCloudConfigErrorDomain - 0x80EF (33007)].
--- END OF ERROR ---

Our Apple DEP account now has a new server, with the name 'Apple Configurator Devices'.

What am I maybe doing wrong in the above? I can set up the device and install the Meraki profile without issue, but this is not DEP enrolled.

Thank you,
Peter James

[GregCrider]

I've done a few now. I did mine almost the same. I added a network profile so that it could connect to the wifi. I do tend to get an error at the end but it didn't seem to ultimately matter. After I got the error, I logged in the Apple DEP site. I saw the new "Devices Added by Apple Configurator 2" server with the iPads that I just used the Configurator on. I used the Manage Devices to assign them to my "Meraki MDM" server. Once that was done, I was able to finish the setup on the device. The iPad has a new Remote Enrollment setup page telling basically that you can opt out using the settings app. After you "Next" your way out of that, it downloads a configuration and you have the home screen on the iPad. I went to the Meraki DEP page and did a full sync and the devices were now available to assign settings just like if they had been purchased with DEP.

I don't know if this makes a difference but I am the Apple DEP account owner not an admin.

[PeterJames1]

@GregCrider Thanks for this.

I too can see the newly created server, but unfortunately no devices have been added.

[soomeGUy]

Also, when will the new IOS11 restrictions be added to SM?

[PeterJames1]

The below video appears to cover this topic:

https://www.youtube.com/watch?v=J2FfN9Amcx8

But unfortunately does not answer if 'Apple DEP - Administrators' are blocked from adding devices.

Thank you,
Peter James

[soomeGUy]

When it comes to deploying Meraki w/ DEP, should i have an entry in DEP for each network? Or do I just add the ipads to Meraki via DEP and then move them to the correct network after?

Also, there are some new restrictions in IOS11, like DNS proxy, etc. Will these be added to Meraki soon?

[PeterJames1]

I have no idea why this failed or produces an error on three iPod's but then worked on my work iPhone without issue. No Apple Configurator settings were changed.

But this does rule-in that 'Administrators' can add devices via this method.

Thank you,
Peter James

[PeterJames1]

This issue I had was because someone had enrolled my test devices previously to a DEP Account.

After sorting this out, my new devices added without issue under an Administrator access account.

Thank you,
Peter James

[PeterJames1]

@robby_barnes - Did these devices show up in your Apple DEP Account? And did you use your main Apple DEP account or an Administrator account of the DEP account?

@CarolineS1 - I appreciate this. Can you please let me know when this guide is updated / created.

According to the new Apple DEP T&C's and Apple directly, only the customer can be an owner of the Apple DEP account and service providers should only access it under an Administrator account.

I am currently wondering if Apple have made the requirement that only Apple DEP owners (and not Administrators) can add devices and these credentials must be used with Apple Configurator.

Thank you,
Peter James

[robby_barnes]

---

@PeterJames1 wrote:

@robby_barnes - Did these devices show up in your Apple DEP Account? And did you use your main Apple DEP account or an Administrator account of the DEP account?

---

Good question. I believe I was logged in with the owner account when I did it.

[PeterJames1]

I have pulled some devices logs off and found:

<Notice>: Received response 403 for request to https://deviceenrollment.apple.com/v2/enroll

This is definitely pointing me down the direction this is a permission issue for 'Administrator' accounts. I am now contacting our DEP Agent account holder.