11.7 Enrolling an iOS Device

This scenario shows you how to enroll an iOS device as a fully managed device in your ZENworks Management Zone.

11.7.1 Procedure

  1. In the Safari browser on the iOS device, enter ZENworks_server_address/zenworks-eup, where ZENworks_server_address is the DNS name or IP address of the ZENworks MDM Server.

    The login screen for the ZENworks User Portal is displayed. You use the ZENworks User Portal to enroll devices to the zone.

  2. Enter the user’s user name and password. If Allow Simple Enrollment option is selected for the user source to which the user belongs, then the registration domain need not be specified or else specify the registration domain. For information, see Section 4.2, Enabling a User Source for Mobile Device Enrollment. Tap Sign In.

    NOTE:If the Allow Simple Enrollment option is not enabled or the registration domain name is not configured, then you can specify the configured user source name in the Domain field while enrolling a device.

    All devices associated with the user, are displayed in the ZENworks User Portal.

  3. Tap Enroll in the upper-right corner to display the enrollment options for the device.

    The enrollment options are determined by the user’s Mobile Enrollment policy. For details, see Creating a Mobile Enrollment Policy.

  4. Tap Managed Device Only to display the Enroll Device Options screen. If you have configured your Mobile Device Enrollment policy to allow the user to specify the device ownership (corporate or personal), you are prompted for that information. Select the appropriate device ownership option and click OK.

  5. Tap Download Certificate to display the Install Profile screen.

  6. Tap Install and follow the prompts to install the certificate and return to the Enroll as Managed Device screen.

    The ZENworks Trust Profile contains the certificate required for secure communication between the device and the ZENworks Primary Server.

  7. Tap Download Profile in the Enroll as Managed Device screen, to display the profile install screen. Tap Install and follow the prompts to install the profile and return to the Enroll as Managed Device screen.

    The ZENworks Device Enrollment Profile contains the MDM profile required for ZENworks to manage the device.

  8. Tap Home to return to the Home page. The device is displayed in the My Devices list with the status as Enrollment in Progress. You need to refresh the browser to update the status to Device is Active.

    NOTE:If the device remains in Enrollment in Progress state for a considerable amount of time, then in the ZENworks User Portal, tap the refresh icon appearing against the device.

    At this point in time, you can view the enrollment mode on the Device Information page in ZCC. To view the device information, from the left hand side navigation pane in ZCC, click Devices > Mobile Devices (or navigate to the folder as configured in the Mobile Enrollment Policy) and select the appropriate device. The enrollment will be displayed as iOS MDM.

  9. An email account is automatically set up on the device based on the Mobile Email Policy assigned to the user or the device.

    NOTE:If an Exchange ActiveSync account was manually configured on the iOS device before it was enrolled, then it should be deleted as an email account will be automatically configured on the iOS device if a Mobile Email policy is assigned.

After the device is enrolled to the ZENworks Management Zone, the enrollment mode of the device is displayed as iOS MDM + ActiveSync on the Device Information page in ZCC.