Jump to:navigation, search
Wiki

DEP Profiles

From Securepoint Wiki




























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden





























| Skips Apple ID setup.
Availability: iOS 7.0+, tvOS 10.2+, and macOS 10.9+ }}









































DEP profiles for contactless setup configuration of Apple devices

Last adaptation to the version: 2.5

New:
notempty
This article refers to a Beta version
Access: portal.securepoint.cloud  Mobile Security iOS/iPadOS DEP Profiles

Usage

DEP profiles are used to transmit a configuration for the setup process to devices during initial commissioning or a factory reset.
Setting for:

  • Setup steps are predefined or skipped.
  • Determination of whether multi-user devices (shared iPads) are involved.
  • Determination of the device management (managed/unmanaged)


Prerequisite

  • These devices must be specifically dedicated to Apple's DEP.
    These devices can only be purchased directly from Apple or a DEP registered reseller .
    • The serial number of the devices will then be stored at Apple for DEP.
    • The devices can be shipped directly to the device user.
    • When initialising the device (initial start-up or factory reset), the MDM information and the configuration are loaded automatically.
  • Devices that are not factory-set for Apple's DEP must first be added once to the Apple Business Manager or Apple School Manager with the help of the Apple Configurator. After being assigned to a DEP profile, these devices will then also receive the DEP profile during a reset.
  • Registration at Apple Business Manager
    or at Apple School Manager
    This in turn requires a DUNS number. Granting and activation can take several days.
notempty
The devices must not be added to the reseller's ABM/ASM! Doing so would violate Apple's terms and conditions!
It is recommended that each end customer has their own ABM/ASM account and the devices are added there accordingly.
notempty
Note on ‘’'DEP profiles'‘’ from ‘’'Portal version 2.8‘’ Vorlage:Note-box
  • For security reasons, enrollment will only be possible if a ‘’'DEP profile with PIN'‘’ has been assigned to all iOS/iPad devices
  • DEP profiles without a PIN are marked with the label  Insecure - without PIN
  • All DEP profiles without PIN must be deleted
  • Further information can be found in the Wiki article Settings Apple DEP

Procedure

DEP Profiles

notempty
DEP profiles can not be changed
Apple does not provide any modification of DEP profiles once they have been saved.
If necessary, a new DEP profile must be created.
DEP profiles can now also be deleted
Apple itself still does not provide the deletion of DEP profiles. DEP profiles marked as deleted are therefore hidden in our portal.
Create profile with the  Add profile button
Settings for the configuration setup
Caption Value Description
Add profile
Name Name Profile name
Standard    If activated, the profile is used as the default profile.
If no standard profile exists and a device is not assigned to a profile, the standard setup is executed.
Supervised    If activated, new devices are registered as Supervised
Is MDM removable    If this option is deactivated, the user cannot remove the MDM payload supplied by the configuration URL via the device's user interface. This means that the MDM payload is bound to the device.
Multi user    When enabled, the device is instructed to be configured for Shared iPad
This key is only valid for Apple School Manager organisations using X Server Protocol version 2 and above
Devices that do not meet the minimum requirements for the released iPad do not implement this command
Mandatory    If activated, the user must not skip applying the profile returned by the MDM server
Skip setup elements Select elements A list of the setup windows to be skipped.
Action Button Skips the setup of the Action Button
Update completed Skips the Update completed dialog
Android Skips the option to migrate data from another Android device.
For iOS/iPas 9.0 and higher
Alert tone (Deprecated in iOS 15) Skips the option to activate the display colour tone.
For macOS 10.13.6 and higher and iOS/iPadOS 9.3.2 and higher.
Apple ID Überspringt die Einrichtung der Apple ID.
Verfügbarkeit: iOS 7.0+, tvOS 10.2+, und macOS 10.9+
Apple Intelligence Skips the setup of Apple Intelligence (Apple's Artifical Intelligence)
    Skips Apple Pay setup.
For macOS 10.12.4 and above and iOS/iPadOS 7.0 and above.
Apple Watch Migration Skips the option to migrate data from an Apple Watch.
For iOS/iPas 11.0 and higher
AppStore Skips the setup for the Apple Store
Accessibility Skips the configuration for accessibility settings of the device
Screensaver (tvOS) Skips the tvOS screen about using aerial screensavers in ATV.
Availability: tvOS 10.2+
Screen Time Activates the Screen Time screen.
For macOS 10.15 and higher and iOS/iPadOS 12.0 and higher.
Biometric Skips biometric setup (TouchID). Availability: iOS 8.1+ and macOS 10.12.4+.
Data protection Lets the user access the Privacy screen.
For macOS 10.13.4 and above and iOS/iPadOS 11.3 and above.
Diagnosis Skips the Diagnostics screen to the user. This screen allows the user to send diagnostic data to Apple.
For macOS 10.9 and above and iOS/iPadOS 7.0 and above.
Appearance Skips the Appearance screen.
For macOS 10.14 and above and iOS/iPadOS 13.0 and above.
Device-to-Device Migration Skips the option to migrate data from another Apple device
Home Button Sensitivity (Deprecated in iOS 15) Skips the Meet the New Home Button screen on iPhone 7, iPhone 7 Plus, iPhone 8, iPhone 8 Plus and iPhone SE.
Availability: iOS 10.0+
iMessage and FaceTime Skips the setup for iMessage and FaceTime.
For iOS/iPadOS 9.0 and later.
iMessage activation iMessage activation--desc
Terms and Conditions Requires the user to accept Apple's terms of use.
For macOS 10.9 and higher and iOS/iPadOS 7.0 and higher.
OnBoarding (Deprecated in iOS 14) Displays onboarding screens to users for informational purposes, such as Cover Sheet, Multitasking or Control Centre.
For iOS/iPadOS 11.0 and higher
Passcode Hides and disables the passcode pane.
 A password should always be required for unprotected devices unless access is protected in some other way (such as in kiosk mode where the device is restricted to one app).
For iOS/iPadOS 7.0 and higher
Security Security--desc
SIM-Setup Skips setting up the mobile phone service.
For iOS/iPadOS 12.0 and later.
Software Updates Displays required software updates.
For iOS/iPadOS 12.0 and higher.
Location Disables Location Services
For macOS 10.11 and above and iOS/iPadOS 7.0 and above.
  • Should not be skipped, otherwise the Cupertino time zone will be used.
    • Tap to Setup (tvOS) Skips the Tap To Set Up option in AppleTV about using an iOS device to set up your AppleTV. Availability: tvOS 10.2+
    TV Provider Sign-in (tvOS) Skips the TV provider sign in screen.
    Availability: tvOS 11.0+
    TV Home Screen Sync (tvOS) Skips TV home screen layout sync screen.
    Availability: tvOS 11.0+
    TVRoom (tvOS) Skips the “Where is this Apple TV?” screen in tvOS.
    Availability: tvOS 11.4+
    Restore Skips the Apps & Data screen.
    Through this screen, the user has the option to restore or transfer data from the iCloud backup when setting up the device.
    For macOS 10.9 and above and iOS/iPadOS 7.0 and above.
    Welcome Skips the Welcome dialog
    Zoom (Deprecated in iOS 17) Allows the user to zoom in or out while setting up the device.
    For iOS/iPadOS 8.3 and later.
     Select all Selects all elements exept for location to skip
    If location is skipped during the setup, the selection of language and time is also skipped, and, for example, the Cupertino time zone is used
    Department Department Department or site name.
    Support phone number Telephone number A support phone number for the organisation.
    Support email address E-Mail A support email address for the organisation.
    Organization Magic Magic key Uniquely identifies various services that are managed by a single organisation.
    Devices Add devices Devices assigned to the profile.
    This is the only field in which changes can still be made after saving.
    Apply and permanently set the details with the   Save button.
    Apple does not provide any modification of DEP profiles once they have been saved.
    If necessary, a new DEP profile must be created.
    Retrieved from "https://wiki.securepoint.de/index.php?title=MS/DEP-Profile&oldid=96329"