Integrating Apple's Automated Device Enrollment with LogMeIn Resolve MDM

To use Apple's Automated Device Enrollment program to enroll your devices in LogMeIn Resolve MDM, you must first connect your Apple Business Manager or Apple School Manager account with LogMeIn Resolve MDM.

For general information on Automated Device Enrollment, see our dedicated article.

About Automated Device Enrollment

Automated Device Enrollment controls how your organization's Apple devices behave when users turn them on for the first time after unboxing or after a factory reset. For example, you can select which steps the devices' iOS Setup Assistant presents to the device users. During the setup process, the devices connect to the MDM solution and get automatically configured according to your preferences.

Thanks to this automated process, there's no need for IT to physically handle the devices.

Connect Apple Automated Device Enrollment with LogMeIn Resolve MDM

Before you begin: The following requirements must be met to use Apple Automated Device Enrollment with LogMeIn Resolve MDM:

Your organization must be enrolled in Apple Business Manager or Apple School Manager.
Your Apple devices must be purchased from a vendor that can add the devices to your Apple Business Manager or Apple School Manager account. Otherwise, you must manually add the devices to your account using Apple Configurator.

In LogMeIn Resolve MDM, navigate to System > Infrastructure diagram.
Hover over the Apple Device Enrollment Program icon and select Configure.

Result: The Configure Device Enrollment Program wizard opens.
Select Download certificate to download the dep-public-key.pem file, then select Next.
Sign in to Apple Business Manager or Apple School Manager. You can select Sign-in to Apple Business Manager to open the Apple Business Manager login page.

Important: Do not close LogMeIn Resolve MDM because you will have to navigate back to the Configure Device Enrollment Program wizard after creating the server token in Apple Business Manager or Apple School Manager.
In Apple Business Manager or Apple School Manager, navigate to Preferences > Your MDM Servers, then select Add.
Enter your LogMeIn Resolve MDM site's name in the MDM Server Name field.
Upload the certificate file downloaded from LogMeIn Resolve MDM by selecting Upload Certificate or dragging and dropping the file in the Upload Public Key field, then select Save.

Uploading certificate file in Apple Business Manager
On the LogMeIn Resolve MDM server page available under Your MDM Servers, select Download MDM Server Token, which is a file with a .p7m extension.
Navigate back to LogMeIn Resolve MDM and select Next on step 2 of the Configure Device Enrollment Program wizard.

Note: If you previously closed LogMeIn Resolve MDM or the site timed out, follow steps 1–3 above.
Select Upload server tokens to upload the P7M file to LogMeIn Resolve MDM, then select Next.

Note: The token is valid for one year. To learn how to renew your Automated Device Enrollment token, see Renewing an expiring Apple Automated Device Enrollment token.

Result: The Configure Device Enrollment Program wizard opens.
Create an enrollment profile in the Configure Device Enrollment Program wizard and select Configure to finish setting up Automated Device Enrollment for your LogMeIn Resolve MDM site.

On the configuration screen, you can define your Apple devices' enrollment features, such as managing the devices in Supervised mode. On the iOS Setup screens and macOS Setup screens tabs, you can specify which screens should be skipped when a new or factory-reset Apple device is powered on for the first time.

The Profile assignment method on the Enrollment settings tab determines how the enrollment profile is deployed to your Apple devices. For more details, see Enrollment profiles for Apple's Automated Device Enrollment.

Note: The Configure Device Enrollment Program wizard is only visible when you first connect your LogMeIn Resolve MDM site with Apple Automated Device Enrollment. To modify an existing enrollment profile, see Enrollment profiles for Apple's Automated Device Enrollment.

Results: Automated Device Enrollment is configured for your LogMeIn Resolve MDM site and can be used to enroll your Apple devices. The Apple DEP page appears under the Enrollment menu.

Article last updated: 11 April, 2025