Jump to:navigation, search
Wiki

Device migration and re-enrollment

From Securepoint Wiki





























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden




































  • Note

    This article includes descriptions of third-party software and is based on the status at the time this page was created.
    Changes to the user interface on the part of the manufacturer are possible at any time and must be taken into account accordingly in the implementation.
    All information without warranty.










    • Migration / switching to other MDM servers and re-enrollment of iOS / iPad devices

    Last adaptation to the version: 2.17 (05.2026)

    New:
    • Anpassung an das neue Design des Apple Business
    notempty
    This article refers to a Beta version
    -
    Access: portal.securepoint.cloud  Mobile Security

    Introduction

    This guide describes how to switch iOS/iPad devices that exist in Apple Business or Apple School Manager (ASM) from one MDM server to another.
    Both migration to a Securepoint MDM server and switching devices to another tenant are described.
    Additionally, the re-enrollment of Apple devices is explained.

    notempty
    In this device migration, the affected devices do not need to be reset.

    Requirements

    • From iOS / iPadOS version 26
    • Apple DEP available
    • Devices have been in Apple Business/ASM for at least 30 days

    Switching to the Securepoint MDM server

    To switch to a Mobile Device Management server from Securepoint, the following steps are required:

    Setting up the Securepoint MDM server for iOS/iPad
    1. In the Securepoint Reseller Portal (RSP)
      1. Under Resellerportal Customers a corresponding customer was created
      2. Under Resellerportal Licenses a Mobile Security license or UEP/MDM license was booked
    2. In the Unified Security Portal (USP)
      1. Login and two-factor authentication and accept terms and conditions
      2. In Mobile Security Settings link the Apple Push Certificate and the DEP Token
      3. In Mobile Security iOS/iPadOS DEP Profiles a DEP profile is created
    3. In Apple Business / Apple School Manager (ASM) a new Device Management Service (DMS), i.e. the Securepoint MDM server, is created
    Migration
    1. In Apple Business/ASM assign the desired devices to the new DMS
      • Under Devices / Inventory select the devices that should switch the server
      • For a single selected device, go to  Assign Device Management
      • Multiple devices can be added by clicking the button
        Multiple devices can also be selected by holding down the Ctrl key or the ↑ left Shift key
      • For multiple selected devices, go to  Assign Device Management and click Assign
    2. Remove the VPP Token from the old MDM/Tenant
    3. In the USP, add the VPP Token in the Securepoint MDM
    Device setup
    1. In the USP
      1. Accept the terms and conditions of the device tile
      2. In Mobile Security iOS/iPadOS [1] group the desired apps with a tag
      3. If necessary, assign the VPP licenses
      4. Assign tags to the devices
      5. In Mobile Security iOS/iPadOS Profiles create the desired profiles and then assign them to the devices






    1. 2. 3.
    Abb.1 Abb.2 Abb.3
    Abbildungen













    Fig.1
    Fig.2
  • In the Securepoint Portal (USP), the Securepoint MDM tenant is set up under Mobile Security [2]
    • Datei:MS 2.10 iOS enrollment Migration Schritt3-en.png
    Fig.3
  • Log in to Apple Business
    Account must have the role Administrator or Device Registration Manager
    • Fig.4
  • Click on [3] / Services
  • Check if the Securepoint MDM server is present
  • If not, add the Securepoint MDM server using Add
    • Fig.5
  • Under [4] / [5] select the devices that should switch the server
  • For a single selected device, go to  Assign Device Management
    • Fig.6
  • Multiple devices can be added by clicking the button
    Multiple devices can also be selected by holding down the Ctrl key or the ↑ left Shift key
  • For multiple selected devices, go to  Assign Device Management and click Assign
    • Fig.7
  • At Management Service select the Securepoint MDM server
  • If desired, a deadline can be set using Add Deadline for when the devices should be switched
    The user will receive information about this
    • If registration does not occur by the deadline, the switch will be automatically enforced at that time
  • Remove the Apple DEP and VPP token from the previous MDM or tenant
  • This varies depending on the provider
  • In the USP, add the VPP token in the Securepoint MDM
    • Fig.8
  • The Securepoint MDM can be prepared
    • Fig.9
  • The users of the affected devices will be prompted to restart
  • After restarting, the devices are ready for operation on the new Securepoint MDM server (or tenant)
    •

    Tenant change

    To switch one or more devices from one tenant to another, the following steps are required:

    1. Log in to Apple Business
    2. Under [6] / [7] select the devices that should switch the tenant
      • For a single selected device, go to  Assign Device Management
    3. Multiple devices can be added by clicking the button
      Multiple devices can also be selected by holding down the Ctrl key or the ↑ left Shift key
      • For multiple selected devices, go to  Assign Device Management and click Assign
    4. At Management Service select the desired tenant
      • If desired, a deadline can be set using Add Deadline for when the devices should be switched
        The user will receive information about this
      • If registration does not occur by the deadline, the switch will be automatically enforced at that time
    5. The users of the affected devices will be prompted to restart
    6. After restarting, the devices are ready for operation on the new tenant






    1. 2. 3.
    Abb.1 Abb.2 Abb.3
    Abbildungen













    Fig.1
    • Log in to Apple Business
      Account must have the role Administrator or Device Registration Manager
    Fig.2
  • Under [8] / [9], select the devices that should switch the tenant
  • For a single selected device, go to  Assign Device Management
    • Fig.3
  • Multiple devices can be added by clicking the button
    Multiple devices can also be selected by holding down the Ctrl key or the ↑ left Shift key
  • For multiple selected devices, go to  Assign Device Management and click Assign
    • Fig.4
  • At Management Service select the desired tenant
  • If desired, a deadline can be set using Add Deadline for when the devices should be switched
    The user will receive information about this
    • If registration does not occur by the deadline, the switch will be automatically enforced at that time
    • Fig.5
  • The users of the affected devices will be prompted to restart
  • After restarting, the devices are ready for operation on the new tenant
    • Fig.6
  • This method also works for a tenant change between Prod <-> Dev
    •

    Apple Re-Enrollment

    • When a device is re-enrolled, the configurations of the previous device are automatically transferred
    • Provided that this device is still present in the Securepoint Portal
      • This device will be marked with the icon Signed out
    • If you want to prevent the transfer of settings for a specific device, it is necessary to remove the device from the system before it is re-enrolled
    notempty
    Note: When a device is passed to a new user, it is important to update the user assignment in the system. Otherwise, the new user could gain access to the data and accounts of the previous user.
    Retrieved from "https://wiki.securepoint.de/index.php?title=MS/enrollment/Geraetemigration&oldid=105085"