Enrolling Apple mobile devices

The following BMC Client Management video (2:21 min) provides information about how to enroll Apple mobile devices for mobile device management.

https://youtu.be/aRtCbYB9IV8

Enrolling mobile device

You can enroll your mobile device by accessing the enrollment link shared by your IT administrator. If you are enrolling the Apple mobile device for the first time, you follow the link through you Safari browser. It opens the enrollment wizard that prompts you to first installs the BMC Client Management Certificate Authority (CA) certificate and then enrolls the mobile device.

Also, if you are opening the enrollment link from a device other than the mobile device you want to enroll, you should have a QR code scanning application (for example, QR Reader) installed on the mobile device to be enrolled. Alternatively, if you do not have a QR code scanning application, you can select the option to receive the links for adding the CA certificate and enrolling the mobile device in an email.

Note

The links (as an alternative to scanning the QR) to install CA certificate and enroll mobile device are valid for single use only.

To enroll an Apple mobile device by accessing the enrollment link from the enrolling device

Open the enrollment link in the browser of the mobile device you want to enroll. In the case of iOS devices, this must be the Safari browser.
The Welcome page displays the following options:
- Enroll Android Device
- Enroll Apple device
Select Enroll Apple Device and follow the on-screen instructions to complete the enrollment.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

To enroll a mobile device by accessing the enrollment link from another device

Open the enrollment link.
On the Welcome page, select Enroll Apple Device.
On the Authentication page, specify the email address where you received the enrollment invitation, enter your active directory user account password, and click Next.
Read and agree to the Terms and Conditions and click Next.
The Enrollment page displays the QR codes that you can scan using a QR code scanning application to install the BMC CA certificate and to enroll the Apple mobile device.
From the mobile device that you want enroll, scan the QR code under the Add the certificate authority step.
Warning
Notes
- If the mobile device was enrolled previously and you retained the BMC Client Management CA certificate, you can skip this step and directly scan the QR code under the Enroll the mobile device step.
- You can verify the BMC Client Management CA certificate under Settings > General > Profile & Device Management.
- If you do not have a QR code scanner application, you can select the option to receive the links for adding the CA certificate and for enrolling the mobile device in an email. These links can be used once, and you must open them in the Safari browser of the mobile device that you want to enroll.
After the CA certificate is installed, click Show QR code under the Enroll the mobile device step.
Scan the QR code from the mobile device.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

Withdrawing device from mobile device management enrollment

You can withdraw an enrolled mobile device from the mobile device management any time by uninstalling the BMC Encrypted Configuration Profile and enroll it again later as per your requirement.

To withdraw device from mobile device management enrollment

In your managed mobile device, navigate to Settings > General > Profile & Device Management.
The BMC Encrypted Configuration Profile and BMC Client Management Certificate Authority certificates are displayed. These certificates are used for managing your mobile device from BMC Client Management.
Select the BMC Encrypted Configuration Profile certificate and then tap Remove Management.
Tap Remove to confirm.
The certificate is removed. The mobile device is no longer managed by BMC Client Management.
(Optional) To also remove the BMC CA certificate, select BMC Client Management Certificate Authority and remove it.
Warning
Note
Even if you retain the BMC Client Management CA certificate after withdrawing the enrollment, the mobile device is not managed by BMC Client Management. This certificate would be useful if you intend to enroll the mobile device again in the future.