Enroll iOS devices

When a customer is not eligible for Automated Device Enrollment, or you determine it's not the best option for the customer, you can set up manual enrollment using the following tasks:

Requirements

  • The Apple Push Notification service (APNs) must be set up prior to enrollment.

Enroll a single iOS device

  1. In the left-hand navigation menu, click Views > All Devices.
  2. Click the Mobile Devices tab.
  3. Click Add.
  4. Click Invite Mobile Devices.
  5. Select the customer and site.
  6. Enter the invitation name and description.
  7. Under Devices to Invite, click Add.
  8. In the Create a New Invitation dialogue, enter the user's email address.

  9. In Maximum Registrations per Email Address, enter the number of devices the user will register.

    If the same user has multiple devices associated with their email address, the number of registrations should include all devices associated with the user.

  10. Click Add.

  11. Select if the device should automatically import to N-central.

  12. Set the Invite Expiration time to define how much time the user has to accept the invitation.

  13. Enable notification emails to the user when the mobile devices has been registered or the invitation time has expired, and who receives that message.

  14. Click Save.

Configuration data

Field Description
Customer Customer associated with the device.
Site Site to associate with the device.
Device Name Name of the device for identification in N-central.
Email Address Email address that is accessible from the device to receive the enrollment request as Mobile Device Provisioning email.
Phone Number Phone number of the device to receive the enrollment request as Mobile Device Provisioning SMS message if configured (optional).

You must replace the leading 0 in the Phone number with the country code for all countries.

Enroll multiple iOS devices

You can add multiple devices to N-central at the same time by: 

  • Sending multiple invites to a single email address to allow one individual to add more than one device.
  • Using a CSV file that you create and upload directly to the N-central dashboard for bulk invites, rather than enter the details individually or by sending multiple invite registrations to one individual.

Send multiple invites to one email

To send more than one device invite registrations to one email address: 

  1. In the left-hand navigation menu, click Views > All Devices.
  2. Click the Mobile Devices tab.
  3. Click Add.
  4. Click Invite Mobile Device.
  5. Select the customer and enter the invitation name and description.
  6. Click Add and enter the user's email address.
  7. In Maximum Registrations per Email Address, enter the number of devices the user will register. For example, they may have an iPhone and an iPad using the same email address.
  8. Click Add.
  9. Set the Invite Expiration time to define how much time the user has to accept the invitation.
  10. Enable notification emails to the user when the mobile devices has been registered or the invitation time has expired, and who receives that message.
  11. Click Save.

Send invites to multiple emails

To send multiple device invite registrations to different email addresses:

  1. In the left-hand navigation menu, click Views > All Devices.
  2. Click the Mobile Devices tab.
  3. Click Add.
  4. Click Invite Mobile Device.
  5. Click Add from CSV.
  6. Select the CSV Add Invite Format.
  7. Navigate to and select your CSV file.
  8. Paste the CSV formatted values in the text box.
  9. Click Add Invites.

The mobile devices are added and an enrollment request is sent to the device holders. The enrollment request can be a email or text that contains the information to register.

CSV file

Each CSV file can contain information for five hundred devices and must be in the following format:

client_name,site_name,device_name,first_name,last_name,email_address,phone_number, send_sms(0/1),byod(0/1)

  • client_name and site_name must match the corresponding entries in the Dashboard
  • only one occurrence of a device_name is permitted per site
  • send_sms and byod fields can be either (0) for no or (1) for yes
  • phone_number is optional so you can leave it blank. For example, johndoe@mail.it,,0,1

You must save the CSV file as UTF-8 or ISO-8859-1 (ISO Latin-1).

End user actions to enroll iOS devices

Until a device holder provisions their mobile device, it reports as an unregistered mobile device, and the operating system and the device type is not displayed in the Mobile Devices tab.

When end users select the link in the enrollment request email or SMS text, they are guided through the following steps:

For Apple iOS, we retrieve the required provisioning files via the Apple Push Notification Service (APNS). For information, see Requirements for DMA

  1. In the left-hand navigation menu, click Configuration > Mobile Invitations.
  2. Click Add.

    3. If there is no DMA certificate set up for that customer or Account, a warning displays.

  3. Complete the Add Invitation Job form:

    1. Select customer and site if required.

    2. Fill in name and description for the Invitation Job.

    3. Click Add to add email recipient(s).

      4. Change # of Invite Registrations to increase or decrease number of mobiles that can be added from that email recipient.

    4. Set the invite expiration.

    5. Click Save.

  4. Email recipients will get an email with a link to install a profile. User will need to access the link from a Mobile device.

  5. Click Download Profile > Allow to download the Mobile Device Management configuration profile.

  6. When the download completes, review the message and click Close.

  7. Go to Settings > General > Profiles & Device Management (for iOS 16 go to Settings > General > VPN & Device Management) and select the Mobile Device Management profile.

  8. Review the profile information and select Install.

  9. Enter your authentication method when prompted.

  10. Review the Apple Root Certificate and Mobile Device Management warning message and click Install.

  11. After reading the Remote Management message, click Trust.

  12. Click Done when the profile installs to exit out of the Mobile Device Management dialog.

Apple iOS only supports one mobile device management (MDM) solution at a time. If a third-party MDM product is already installed on a device, an error message displays and our MDM profile does not install.

To remove the competing MDM product profile, go to Settings > General > Profiles & Device Management (for iOS 16 go to Settings > General > VPN & Device Management) to select the profile and remove it. If you can’t remove the profile, ask for help from the person who provided that profile.

Related articles

Updated: Jul 08, 2024