Setup DEP & VPP with Moki – Updated

In order to enroll devices with Apple’s DEP, you’ll need to handle a few account setup pieces such as getting approved by Apple for DEP, connecting your DEP account with Moki and then specify the enrollment process for your DEP devices. Once your DEP setup is complete, you will then be able to configure your VPP account. Follow these steps below to continue enrolling devices.

DEP Configuration

Step 1 – Sign up for DEP with Apple

Apple’s DEP registration is easy. First off you’ll need to sign up with Apple, which you can do here. For more information on Apple’s DEP click here.

Two things to note:

1. You must acquire a DUNS (Dun & Bradstreet) number to register for a DEP account. To do this, go to https://iupdate.dnb.com.
2. You can complete this process online and in one session but bear in mind this registration is for your business. If you work for a large corporation you may already have a DUNS assigned so find out first.

Step 2 – Link your DEP Account and Moki

Once you are signed up with DEP follow these steps to connect your DEP account with Moki. Connect Moki and your DEP account.

1. 1. Login to Moki
   2. Click your account name in the top right and select “Account Settings.”

      

1. 1. Scroll down to DEP Setup and click Download in step 1.

      

1. 1. Click the link in step 2 for https://deploy.apple.com (https://business.apple.com for business customers & https://school.apple.com for education customers) and login to your Apple DEP account.

      

1. 1. Sign into your account.
      

1. Once you are signed into your account, click on “Settings” in the bottom left-hand corner of the page. 
2. Click “Device Management Settings”, then “Add MDM Server” icon towards the upper right-hand side of the screen.

   

3. Give the server a name, select whether or not you would like to “release devices” (for more information on releasing devices, click here), and upload the .pem cert that you downloaded from Moki on step 3.
4. Click “Save”.
5. If you do not already have your new server selected, select it from the list of servers under the “MDM Servers” section. Then select the “Download Token” icon.

   

6. Now, return to your Moki account and select the “Upload” button to upload the token that you just downloaded from your DEP account.
7. Refresh your browser to confirm that the cert uploaded correctly.

   

Step 3 – Register Device Serial Numbers with DEP and Moki

1. 1. In your DEP account click on “Device Assignments”. 

       

      

1. 1. Enter the serial number(s) of the devices you purchased from Apple, separated by commas or upload a .csv file with the serial numbers listed. Alternatively, if you purchased the devices directly from Apple, you can use your order number provided to you when you completed your purchase.

1. 1. Under step #2 – Choose Action, select “Assign to Server”, then select the MDM server you created earlier, and click “Done”. Those devices have now been assigned to the server that you selected. 
      

1. 1. Go back to your Moki and click on the “Enroll” tab. Copy an existing enrollment code that you created previously, or hit the “+” button, select “iOS” from the provided options and create a new one (then copy the 7 character enrollment code).
   2. Click on the “DEP” tab in the top navigation of your Moki account and then select “Profiles”.

      

1. 1. Click the “New Profile” button

      

1. 1. Give the profile a name, paste in the Enrollment Code that you copied from the “Enroll” tab of Moki, and choose the options that you want the device to go through when it starts up. Anything you skip will turn that step OFF, so make sure you do not skip location or other settings that you would like to manually configure on the device, then hit “Save”. The new profile will show up under the New Profile button

      

1. 1. Click the “Devices” tab that is within the DEP Window, next to the Profiles tab

      

1. 1. Click the “Sync DEP Devices” button. It will take a few minutes, but the devices that you assigned to your Moki MDM Server in your DEP account will populate in this list. You may need to refresh your browser window. Alternatively, you can select the “Add Devices to DEP” button to manually add them.

      

1. Now, you need to assign the profile you created to your DEP devices. To do this, select all your devices or specific devices, then click the drop-down that says “Add Profile”. Select your profile from the list and hit “Yes” to confirm the assignment. 

   

Step 4 – Enroll your device(s)

Finally, turn on your device and go through the startup process. You see a message that the device will be configured via DEP. All the apps, profiles, and tags associated with your Moki enrollment template will be installed on the device. Note: If your device has previously been configured or assigned to another DEP server, you will need to factory reset the device in order for it to pick up the new configuration and Moki Profile. Repeat this process on each new device in which a Moki DEP Profile was assigned. When the device has completed the enrollment process you can select the “Devices” tab in Moki and your device will be listed.

VPP Configuration

1.  Sign into your DEP/VPP account at https://deploy.apple.com (https://business.apple.com for business customers & https://school.apple.com for education customers).
2. Once you are signed in, select “Settings” from the bottom left-hand corner of the screen.
3. Then, select “Apps and Books” from the list of options.

   

4. Agree to the terms and conditions and confirm your company’s information if necessary.
5. Finally, download the VPP Token from Apple by selecting the “Download” button under the “Server Token” section. This button is located on the lower, right-hand side of the page.
6. Once the token is finished downloading, sign into your www.mokimanage.com account.
7. Select your account name in the upper right-hand corner of the screen and click on “Account Settings.”

   

8. Scroll down to the “VPP Setup” section of settings and click on the “Upload”. Then select the token file that you downloaded from Apple. This file will be a .vpptoken format.
9. Once uploaded your “VPP Setup” section will look like this:

   

10. If you have already acquired licenses for apps from VPP you will now see them in your “Apps” tab. These apps will have a “Yes” next to them under the VPP column. To assign licenses to your applications, select the “Apps and Books” tab from the options plane in your DEP account, search for the application, then assign licenses.
11. Clicking on the app details in Moki will show you a new VPP information tab which shows your license statistics. You will also notice a new “Sync VPP Now” button on the app page. Clicking this button will add any newly licensed apps automatically into your Moki account.

Two Critical Notes about your VPP token:

1. You can only use one VPP account in Moki. If you have multiple accounts or subtenants with the need of VPP licensing you will need one VPP account per Moki account. This is a limitation Apple places on these accounts.
2. You must update your token every 365 days or every time you change your iTunes account password.