Enrolling Apple mobile devices


The following BMC Client Management video (2:21 min) provides information about how to enroll Apple mobile devices for mobile device management.

icon-play.png https://youtu.be/aRtCbYB9IV8

Enrolling mobile device

You can enroll your mobile device by accessing the enrollment link shared by your IT administrator. If you are enrolling the Apple mobile device for the first time, you follow the link through you Safari browser. Depending on the configuration of the mobile device management (MDM) server, the enrollment wizard might prompt you to install a BMC Client Management Certificate Authority (CA) certificate to ensure the mobile device trusts the MDM Server Certificate.

Also, if you open the enrollment link from a device other than the mobile device you want to enroll in, you should have a QR code scanning application (for example, QR Reader) installed on the mobile device to be enrolled. Alternatively, if you do not have a QR code scanning application, you can select the option to receive the links for adding the CA certificate and enrolling the mobile device in an email.

Warning

Note

The links (as an alternative to scanning the QR) to install CA certificate and enroll mobile device are valid for single use only.

To enroll an Apple mobile device by accessing the enrollment link from the enrolling device

  1. Open the enrollment link in the mobile device browser you want to enroll. It is recommended to use the Safari browser to perform this.
    The Welcome page displays the following options:
    • Enroll Android Device
    • Enroll Apple device
  2. Select Enroll Apple Device and follow the on-screen instructions to complete the enrollment.
  3. After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

To enroll a mobile device by accessing the enrollment link from another device

  1. Open the enrollment link.
  2. On the Welcome page, select Enroll Apple Device.
  3. On the Authentication page, specify the email address where you received the enrollment invitation, enter your active directory user account password, and click Next.
  4. Read and agree to the Terms and Conditions and click Next.
    The Enrollment page displays the QR codes that you can scan using a QR code scanning application to install the BMC CA certificate

    Depending on the mobile device management server configuration, installing the Certificate Authority may not be required.

    and to enroll the Apple mobile device.

  5. (Optional) 

    This step is optional if the mobile device management server does not require a certificate authority to establish trust. This typically applies when the MDM server uses a server certificate purchased from a certificate provider already trusted by Apple devices.

    From the mobile device that you want enroll, scan the QR code under the Add the certificate authority step.

    Warning

    Notes

    • You can verify the list of SSL Certificate Authorities to trust as configured in the mobile device management server configuration under Settings > General > Profile & Device Management.
    • If you do not have a QR code scanner application, you can select the option to receive the links for adding the CA certificate and for enrolling the mobile device in an email. These links can be used once, and you must open them in the Safari browser of the mobile device that you want to enroll.
  6. (Optional) 

    Applicable if the mobile device management server configuration does not include any certificate authorities to trust.

    After the CA certificate is installed, click Show QR code under the Enroll the mobile device step.

  7. Scan the QR code from the mobile device.
    After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

Withdrawing device from mobile device management enrollment

You can withdraw an enrolled mobile device from the mobile device management any time by uninstalling the Mobile Device Management profile and enroll it again later as per your requirement.

To withdraw device from mobile device management enrollment

  1. In your managed mobile device, navigate to Settings > VPN & Device Management > MOBILE DEVICE MANAGEMENT.
    The Mobile Device Management profile and optional certificate authorities related profile certificates are displayed. These profiles are used for managing your mobile device from BMC Client Management.
  2. Select the Mobile Device Management certificate and then tap Remove Management.
  3. Tap Remove to confirm.
    The profile is removed. The mobile device is no longer managed by BMC Client Management.
  4. (Optional) To also remove the certificate authorities related profile, select and remove the entry


Warning

The macro display-footnotes from Confluence is no longer available.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Client Management 25.1