Approving MDM is an essential part of the MDM enrollment process in Addigy. In this article, we will be covering manual device enrollment through the mobileconfig file. For information on other enrollment methods, please view this section.
Table of Contents
- Before Continuing
- Getting the Enrollment URL
- How to Approve MDM Profiles
- Checking if a Profile Has Been Approved
Before Continuing
Please ensure the device you are enrolling meets Addigy's system requirements. If the device does not meet the requirements, we cannot guarantee that the enrollment will work or that the device will properly communicate with Addigy. More information here: Addigy System Requirements
Further, please make sure that you have a push certificate configured and assigned to the policy that the device is, or will be enrolled into. More information on push certificates can be found here: Overview: MDM Apple Push Certificates
Getting the Enrollment URL
To get the enrollment URL, you will want to navigate to the Add Devices page and select the policy you want to enroll these devices in.
Once you have your policy selected, you will see 3 options to obtain the enrollment mobileconfig file:
- Download Profile - Downloads the enrollment profile via your browser. This will not automatically add the profile for approval.
- Copy URL - Copies a direct download link for the enrollment profile to your clipboard. You can give this URL to someone without an account in Addigy, and they will be able to download the enrollment profile, but not access anything else.
- QR Code - Similarly to the Copy URL tool, when scanned, the QR Code downloads the enrollment profile to the device's downloads directory.
If you have Secure Enrollment enabled, the downloading process will look different. Please reference this article for more information on that.
How to Approve MDM Profiles
macOS Sequoia (15)
-
Navigate to System Settings > General > Device Management to approve the profile.
-
Double click the profile.
- Click enroll on the bottom left.
- After clicking "Enroll", an admin must enter their credentials to install the profile.
- Once the enrollment profile is approved, the MDM configurations will begin to install and there will be a message saying the device is supervised and managed.
macOS Ventura (13) & macOS Sonoma (14)
-
Navigate to System Settings > Privacy & Security > Profiles to approve the profile.
- Click on the Profiles menu and select the downloaded profile:
- Once you click on the profile, a new pane will appear and prompt you to Enroll or Ignore the MDM enrollment profile.
- After clicking "Enroll", an admin must enter their credentials to install the profile:
Once the enrollment profile is approved, the MDM configurations will begin to install and there will be a message saying the device is supervised and managed:
macOS Big Sur (11) & macOS Monterey (12)
The moment you connect to the link pasted into the browser, the enrollment profile will be downloaded onto the device and you will receive a prompt similar to the below from System Preferences to review the profile.
- Open System Preferences and select Profiles.
- Once you select Profiles, you will be presented with the enrollment profile as well as an option to "Ignore" or "Install" it. Click Install.
- Once you click Install, you will be prompted for confirmation to install the profile. Click Install.
- After clicking Install, you will be prompted for your user password. Enter your password and click "Enroll".
- Once the password is entered, the MDM enrollment profile will be approved and all profiles will be installed on the device.
Checking if a Profile Has Been Approved
To verify if any devices have an approved profile head over to the Devices page and check out our latest device fact Has MDM Profile Approved. This device fact will reflect if a device has User Approved MDM even after it goes offline.
This device fact will show success if the MDM Profile is approved or if the device is on an older version of macOS that does not support profile approval, and it will fail if the MDM Profile has not yet been approved.
If you need additional help creating a table view like the one above, check out our KB article: Customizing the Devices Table.
When managing devices with MDM, there are a few key device facts that are critical to monitor as an admin. Those device facts are as follows:
Has MDM Profile Approved - will reflect if the MDM Enrollment Profile has User Approval
Has MDM - will reflect if you have Addigy MDM
Installed Profiles - will list all installed MDM profiles on the device
Additionally, all device facts available to you in our Devices page can also be seen on a per-device-basis through GoLive.
If you have issues with approving your MDM Profiles after reviewing these two methods, please reach out to us for further assistance.