Apple’s Device Enrolment Programme or DEP is something you’re going to be hearing more and more about over the coming months. For those of you who don’t know what DEP is or want to find out how it will affect you, we’ve put together a simple guide to run you through the programme, and how it will affect you for any future or past purchases you’ve made with Jigsaw24.
What is it?
In as few words as possible the Device Enrolment Programme (DEP) is a new ‘zero touch’ service from Apple that helps businesses and education institutions easily deploy and manage iPad, iPhone and Mac devices that are purchased directly from Apple or an Apple Authorised Reseller (like us).
In a few more words, DEP makes your existing MDM solution even more hands-off, by allowing the institution to send its preferred settings straight to Apple, who then installs these on your devices as soon as users turn their new devices on. Ideally, you’ll already have an MDM solution in place, but if not, keep on reading for more information about our range of hosted and managed services.
The introduction of DEP with MDM makes deploying and delivering new devices across your institution a speedy process, and ensures that new devices are protected and restricted as soon as the user switches them on. It cuts out the lengthy process of having to manually add the right configurations to devices every time a new member of staff starts, or you purchase a new device.
How does DEP work?
DEP works by applying MDM settings to your devices automatically during setup when they’re first turned on, simplifying the process for IT and end-users. When you buy a new device for your business, you can enrol your devices into the DEP and they’ll automatically have the correct MDM profile and permissions installed when they are first switched on. This means your devices are ready for you to deploy and distribute straight away.
What devices does it cover?
Devices including iPad, iPhone and Mac can all be enrolled in the DEP. It’s worth noting that all new purchases are automatically enrolled in DEP, and any devices that were purchased after March 2011 can also be enrolled. If you enrol your existing devices in to the DEP you’ll need to make sure you’ve associated your devices with the reseller you purchased them from. Our Jigsaw24 Reseller ID is 2287450. To enrol your devices in the DEP click here.
How does it work with MDM?
To use DEP with your MDM solution you need to register your MDM server with Apple so that their servers will remember the configurations you like to deploy to your different types of users. You’ll then get sent a ‘token’ for your MDM server that identifies it to Apple. When you add new hardware to your institution or reload the operating system of your existing hardware, Apple will effectively see your organisation’s token and apply the setup you specified automatically through DEP when you turn the device on for the first time – meaning you wont have to apply the same settings and restrictions every time you get a new device or reload the operating system on an existing one.
What if I don’t have an MDM solution?
DEP will simplify your device deployments, but requires MDM to work. So although you may not yet be using an MDM solution, we would recommend it, as it will save your IT department and users time and stress.
We can provide you with an MDM solution to meet your needs, whether you want to manage it yourself or have it as managed service, host it on premise or in the cloud. Check out our managed supply services here.
What does this mean for education?
MDM is a way to control iPad and install apps on them in bulk without having to collect them all and plug them in. You gain wireless control of restrictions, apps, books, camera functions, the ability to reset forgotten passcodes, and force a class of iPad into a specific app for pupil focus. We recommend MDM as the best way to manage iPad.
All your institution-owned devices can now be enrolled in DEP and associated with an MDM solution. Meaning that whether you use iPad, Mac or iPhone your devices will be configured with your MDM solution as soon as you turn them on. Any existing devices your institution owns can be enrolled in DEP too, as long as they were purchased after March 2011.
So if you were to roll out iPad on a 1:1 basic school-wide with our e7 scheme, your new devices will be enrolled in the DEP and will arrive at your school ready to be configured with the permissions and access rights set up by your MDM solution as soon as you switch them on.
What does it mean for business?
DEP provides a fast and streamlined way to deploy your corporate-owned iOS devices, by automating enrolment in MDM and the supervision of devices during setup. To enrol your corporate-owned devices that were purchased after March 2011 into DEP you’ll need to create an Apple Deployment Programme account and provide Apple with some basic information about your business, including details about your hardware purchases made directly from Apple or an Apple Authorised Reseller (that’s us). You can do this here.
Once you’ve done this you can create and assign people as additional administrators, who are responsible for managing and configuring your corporate-owned devices.
What if I have Apple Configurator?
You have the option to transition to DEP. However, Apple does not allow supervision of devices with configurator if that device is registered to the DEP profile. So you can set up devices with DEP or Configurator, but not both on the same device. If you already have devices enrolled with Apple configurator or an MDM solution using Apple configurator, these can be wiped and re-enrolled to the DEP.
Enhancements to Volume Purchase Programme (VPP)
Volume Purchase Programme now allows for a ‘managed distribution’ model. This model assigns apps to AppleIDs instead of devices, so that apps can appear on the devices without anyone having to type in a password or agree to the installation. Apps can install silently and be ready to use without intervention. Your MDM solution needs to understand who the users are in your organisation and what their AppleIDs are. You can now upload a ‘token’ from the VPP programme that indicates the apps that you’ve purchased. In your MDM interface, you can now assign apps to groups of users, resulting in only specific AppleIDs getting access to apps.
Want to talk to us in more detail about DEP or MDM? Give us a call on 03332 409 333 or email sales@Jigsaw24.com. For all the latest news and tips, follow @WeAreJigsaw24 on Twitter or ‘Like’ us on Facebook.