Enroll via ABM/ASM

Enroll via ABM/ASM



Apple Business Manager (ABM) and Apple School Manager (ASM) are cloud portal services offered by Apple, which are used to enroll and manage Apple devices with an MDM.

Prerequisites

  1. ABM must be available in your country. See the list of countries where ABM is available.
  2. Your organization must be enrolled in ABM and have a Managed Apple ID.
  3. You must have Administrator or Device Enrollment manager role in ABM. Learn more
  4. The devices must be purchased from Apple or its authorized resellers.
  5. You must have configured an APNs certificate.
Note: The following instructions explain how to enroll devices using ABM. This also applies to ASM.

Add devices to ABM

You have to add the devices to the ABM portal to enroll them in Zoho One. You can add devices into your ABM portal in two ways:
  1. Add devices using reseller ID or Apple customer number
  2. Add devices without using reseller ID or Apple customer number

Using reseller ID or Apple customer number

If your devices were purchased directly from Apple or its authorized resellers, you can add them to your ABM portal using this method.
To add devices:
  1. Sign in to your ABM account.
  2. Click Settings in the left menu, then click Device Management Settings.
  3. Click Edit near Customer Numbers.
  4. Enter any of the following details:
    1. Apple Customer Number - If you have purchased directly from Apple
    2. Reseller ID - If you have purchased from an authorized reseller
      Note: If you've purchased from a reseller, share your Organization ID to your reseller. Automatic enrollment will be set up when they submit your device purchases in ABM.
  5. Click Apply.
Once you have added the Apple customer number or reseller ID, the devices already purchased directly from Apple or from that reseller will be added. Moreover, any further devices you purchase from them will also be added to ABM automatically.

Without using reseller ID or Apple customer number

If you have devices that weren't purchased from Apple or its authorized resellers, you can manually add them to your ABM portal using Apple Configurator 2.0.
To add devices:
  1. Configure a blueprint by following the instructions provided for enrolling devices using Apple Configurator.
  2. When preparing the blueprint, enable Add to Device Enrollment Program and Activate and complete enrollment, then proceed with the instructions.
  3. When prompted, enter your ABM account credentials and proceed.
  4. Apply blueprint to devices and enroll.

Integrate ABM with Zoho One

After adding devices to ABM, you have to create an MDM server in your ABM portal and integrate it with Zoho One through the following two-step verification process.
You can create multiple servers in ABM for enrolling devices, but you have to integrate each server with Zoho One through this two-step verification.

Add an MDM server in ABM

  1. Sign in to Zoho One , then click Directory in the left menu.
  2. Go to Device Management.
  3. Go to the Enrollment tab, then click Corporate Enrollment.
  4. Select Apple as the OS, then select Apple Enrollment (ABM/ASM) as the Enrollment type.
  5. Click Enroll devices for business.
    Note: Click Enroll devices for schools if you are using ASM to enroll devices.
  6. Download the Public Key (MEMDMCertificate.pem).
  7. Sign in to your ABM account.
  8. Click Settings in the left menu, then click Device Management Settings.
  9. Click Add MDM Server.
  10. Enter a name for the new server.
    Note: Enable Allow this MDM Server to release devices, if you want the option of removing devices directly from Zoho One.
  11. Click Choose file to select and upload the Public Key (MEMDMCertificate.pem).
  12. Click Save.
  13. Click Download Token to download the server token.

Integrate the MDM server with Zoho One

  1. Go back to Zoho One, then click Next in the ABM/ASM enrollment page.
  2. Click Browse in the Local Server Token field to select and upload the server token downloaded from ABM.
  3. Enter an email address in the Email ID to notify Server Token expiry field to receive notification when the server token is about to expire.
    Note: Separate multiple email addresses with commas.
  4. Click Next.
  5. Select the configurations to skip during device set-up. To skip all the steps, click Select all. Learn more about the configurations
  6. Click Create.

Enroll devices into Zoho One

Once you have integrated ABM with Zoho One, you can enroll the devices that are added in ABM to Zoho One. You can do this by assigning the devices to a server you have integrated with Zoho One.
If you have set up a default server, devices will be assigned to that server whenever new devices are added through reseller or direct-from-Apple purchase; otherwise you will have to do it manually. If the devices are added using Apple Configurator, they will be added to an automatically-created server named Devices added by Apple Configurator 2. You have to reassign these devices to your sever using the below steps.
To enroll devices:
  1. Sign in to your ABM account.
  2. Click Devices in the left menu to view all the devices added.
  3. Select the devices you want to enroll in to Zoho.
  4. Click Edit Device Management.
  5. In the Assign to Server field, select the MDM server you want to assign devices to.
  6. Click Continue.
Once devices have been enrolled in to Zoho One, you can assign the enrolled devices to users in Zoho One. Device enrolled using Apple Configurator has a 30-day provisional period, during which the user can remove the device from enrollment and supervision.

Renew ABM server token

Server tokens generated by ABM are valid for a year, after which they expire. You need to renew the server token to continue managing the enrolled devices in Zoho One.



    • Related Articles

    • Device activation settings for devices enrolled in ABM

      After integrating ABM with Zoho One , you can choose the configurations to skip when the user activates the enrolled device. This helps in smoother deployment of devices for users by skipping unnecessary steps during device-startup. You can choose to ...

    • Enroll via Apple Configurator

      Apple Configurator is a macOS app that is used to enroll iOS and iPadOS devices as corporate devices through USB. With Apple Configurator, instead of configuring settings for devices individually, you can create a blueprint that contains the ...

    • Devices enrollment - Overview

      Enrollment allows you to manage your organization's devices through Zoho One. Zoho One supports various enrollment methods to enroll multiple devices according to the needs of your organization. If you are currently using ManageEngine ...

    • Enroll BYOD devices

      The Bring Your Own Device (BYOD) enrollment enables users to enroll their personal devices. You can enroll your devices in the following ways: By sharing enrollment links to users or groups through email. By generating an enrollment link to enroll ...

    • Devices in Zoho One - Overview

      In Zoho One, devices are classified based on their: Enrollment method Enrollment status Management status Based on enrollment method BYOD devices Bring Your Own Device (BYOD) devices are the personal devices of users that are enrolled in Zoho One ...