Skip to main content

ADE Enrollment Profiles

Learn how enrollment profiles work in Automated Device Enrollment

Apple Business and Apple School Manager will both be referred to as Apple Business in this article. If you are an educational institution, substitute Apple School Manager where relevant.

Getting a device enrolled through Automated Device Enrollment is a four-step process:

  1. Enroll the device in Apple Business

  2. Assign the device to your Vexluna MDM server in Apple Business

  3. Sync Vexluna with your Apple Business

  4. Assign an enrollment profile to the device in Vexluna

Enroll the Device in Apple Business

Assign the Device to Vexluna

Within Apple Business, you must select the device, choose Assign Device Management, and pick your Vexluna connection.

If you prefer, you can configure a management service to be assigned by default to new devices you add to Apple Business. To do that, go to Devices > Management Services, then select Default Device Assignment and pick the MDM service you want assigned by default to each type of device.

Once a default management service is selected for a device type, new devices that are enrolled in Apple Business will automatically be assigned to your selected management service.

If you're manually adding devices to Apple Business using Apple Configurator for iOS, you can choose to assign a device to a management service directly from within Apple Configurator.

Sync Vexluna With Your Apple Business

Vexluna will automatically sync with your Apple Business account every hour, but if you manually add a device, then you must make sure Vexluna recognizes it before you attempt to set up the device.

A device only attempts to download its enrollment profile once during initial activation. If the device has no enrollment profile assigned during activation, you will need to erase the device and re-run Setup Assistant to get it enrolled.

To manually sync Vexluna with Apple Business, log into Vexluna and go to Enrollment > Automated Device Enrollment, then select your Apple Business connection and click Sync Now.

Once synced, the new device's serial number should appear in the Assigned Devices list.

Assign an Enrollment Profile

Select the device in your Assigned Devices list, then click Assign Profile... at the top of the list and select a profile to assign to it. If you don't have any enrollment profiles set up yet, you will need to first create one under the Enrollment Profiles section. Enrollment profiles are specific to the type of device they were created for. For example, an iOS enrollment profile can be used for an iPhone or an iPad, but not for a Mac.

An enrollment profile is a set of basic configurations applied to the device during its initial setup. Enrollment profiles contain settings like:

  • Whether Organization Activation Lock should be enabled during device enrollment

  • Whether the enrollment should be a Locked Enrollment

  • Whether any Setup Assistant screens should be skipped during setup

  • Whether the device should be pre-assigned to a particular Organizational Unit

Aside from the initial Organizational Unit, settings configured in an enrollment profile cannot be changed after enrollment, without erasing and re-enrolling the device.

An enrollment profile must be assigned to a device before the device connects to the Internet during setup. If no enrollment profile is assigned when the device first connects, enrollment will fail and the device must be erased and set up again to enroll.

In the Enrollment Profiles section, you can choose an enrollment profile to be assigned by default for new devices of its type (e.g. iOS, macOS) that are assigned to your Vexluna organization in Apple Business. This ensures that an enrollment profile is always assigned when a device is set up, provided that a Vexluna sync occurred between Apple Business assignment and setup.

Did this answer your question?