I have a DEP token coming up for renewal fairly soon. Are there any gotcha that anyone has come across when renewing this? This is the process that I am planning on following:
1. Log into the Apple Deployment Programs site and select Get Started for the Device Enrollment Program.
2. Confirm your identity with a verification code by selecting the phone number to receive the four-digit code and select Send. When received, enter the code. Select Continue.
3. Select Manage Servers from the left panel.
4. Select the Server Name of your MDM server with the token file you want to renew.
5. Select Generate New Token > Generate and Download Server Token.
6. Select Done > OK.
7. Navigate to the DEP settings page in the AirWatch Console.
8. Go to Groups & Settings > All Settings > Devices & Users > Apple > Device Enrollment Program.
9. Select the Renew button.
10. Upload your newly generated server token to AirWatch.
Thanks
Hi
I'm about to renew my token as well and was looking at making changes since I'm updating anyway. My structure is kind of like this:
Global
Under Global are 4 sub location groups (Business Group 1, Business Group 2,Business Group 3, Business Group 4)
Under each of these Business Groups are other location groups which is where the devices actually enrol into. (eg. Business Group 1 has sub location groups IOS Corporate, IOS BYO, Android Corporate and Android BYO).
Currently my DEP is setup at Global and the assigned profile for devices is to enrol into IOS Corporate anyway. If I want to move DEP setup down to IOS Corporate, i'm thinking following steps:
1. Disable DEP at Global
2. Change location down to IOS Corporate
3. Reconfigure DEP again (download PEM file, upload to Apple, download token using same location as before)
4. Setup default assigned DEP profile again
That's about it?
Reason why the move down is that we share the environment with another IT team who do their own thing and own one of the other Business Group under Global. This will give us the flexibility in future when they want to setup DEP as well for their own devices, as we don't want to share the same location groups and token.
Hi again.
Following on, I've made the change and all looks ok. When I look in Devices > Lifecycle > Enrollment status, devices have re-synced but devices that are already enrolled, now just show as "Registered" under Enrollment status. Does this matter?
Devices previously enrolled under the old DEP profile will show as such until they are re-enrolled from scratch to receive the new DEP profile.
Cool, thanks Thomas, hope all is safe and well your way in these crazy times.