This guide, we will highlight the steps that need to get an iOS program up and running using the Casper Suite and Apple’s user-friendly deployment programs. pretend there’s an organization is about to deploy iOS devices to their employees, and they are not sure where to start, that’s where the Apple Management Experts can help. Since 2002, JAMF Software and the Casper Suite (The Casper Suite is a collection of Mac and iOS management tools) solution have helped organizations across the globe ensure their Apple programs are a success.
Step 1: Sign up for Apple’s Device Enrollment Program and Volume Purchase Program
- Enroll your party/company at deploy.apple.com
- Get the Apple Customer Number from Apple or your Reseller this is required for Device Enrollment Program.
- Use a shared email address for the Apple ID
- Outline who has access to the Device Enrollment Program (DEP) portal page via Admin setting within the DEP site.
Step 2: Consider Apple ID strategy
- With iOS 9 and later, you can deploy apps to either users’ Apple IDs or directly to a device.
- Select whether to use Apple IDs based on the app deployment preference.
- User-based deployments, separate Apple ID per user is recommended.
- Apple IDs necessitate an email address, so consider using users’ work email or their personal email.
Step 3: Ensure stable Wi-Fi and networking
- Solid Wi-Fi and modern networking are serious for a successful deployment.
- Make sure the organization has enough bandwidth and wireless routers to handle all your new devices.
- The Casper Suite requirements to communicate to your devices over the internet for management.
- You will need to choose how you plan to host the Casper Suite on your network, cloud or on-premise.
Step 4: Link Casper Suite to Device Enrollment Program
- Add the Casper Suite as your Mobile device management (MDM) server via Manage Servers on the DEP site.
- The company will need to download a public key from the JAMF Software Server JSS and a Server Token from the DEP site.
- Once connected, the company can assign new devices to be managed by serial or order number on the DEP site.
Step 5: Build your Configuration Profiles
- Conformation Profiles are XML files that act as a recipe for your device settings and are deployed via the Casper Suite.
- Build the profile components in the JSS with settings such as Wi-Fi, Email, and VPN.
- Profiles can also contain security settings and restrictions.
- Consider building different profiles for different groups of users in the group.
Step 6: Consider Supervision
- Supervision allows for a higher level of administration, including locking the MDM profile and managing Activation Lock.
- Supervision can be done automatically via DEP and configured in the JSS.
- Alternatively, you can manually supervise an iPad via Apple Configurator over USB.
Activation Lock is a feature of any MDM. As iOS have their own designed to avoid anyone else from using a device if it’s lost or stolen. It is enabled automatically when “Find My iPhone” is enabled on a device using iOS 7 or later. This can often cause complications for IT if they are reassigning devices to new users. The Casper Suite can solve this by letting IT bypassing the Activation Lock on an administered device.
Step 7: Configure the Casper Suite for Initial Setup Options
- The Pre-Stage Enrollment Settings in the JSS let you outline how the device behaves upon the first startup.
- From here hand-picked selections to supervise devices, lock profiles and skip startup steps.
- Moreover, you can allocate users to iPads via directory services authentication.
Step 8: Purchase apps and books using Apple’s Volume Purchase Program. Two way to get contents:
Managed Distribution is a recommended: License content to the users or devices. You retain ownership of apps, allowing you to revoke and reassign them as needed.
Other is redeemable codes: Download a worksheet that containing redeemable codes and you can then provide to the users. This method permanently transfers an app or book to the Apple ID that redeems the code.
Step 9: There are two ways to assign apps. The following steps outline both user-based (Apple ID required) and device-based VPP app deployments.
Assign to devices (device-based VPP):
- Apps will be positioned directly to devices. No invitations needed.
- Device-based VPP requires iOS 9 or higher.
- Scope apps and other content directly to devices within the JSS.
- Given content will automatically download to the device.
Step 10: Study your app deployment strategy
- Use the Casper Suite Self Service app for user-initiated App install.
- Noiselessly push apps to your users or devices.
- Scope apps to different users via groups for easy distribution.
Casper Suite Self Service is an App that acts as an internal App Store for your organization. Self Service can contain Apps linked to VPP, free Apps, eBooks, PDFs, and Configuration Profiles. If the feature is disabling the App Store, Self Service can serve as a whitelist for approved Apps.
Step 11: Plan for allocating your devices to users
3 different levels of IT participation for handling new devices:
- IT-Driven: IT unboxes iPads, walks through the setup assistant, enrolls the device, and downloads Apps for the user.
- IT Assisted: IT helps the user setup and enroll the iPad. User downloads apps via Self Service.
- User-Driven: User unboxes, sets up, and auto-enrolls iPad via DEP. User downloads apps via Self Service.
Step 12: Enroll the devices
Device management begins with enrolling a device. There are a few methods to choose from:
- Zero-touch, automatic enrollment using Apple’s Device Enrollment Program.
- User-initiated enrollment via the web page or email invitation.
- Apple Configurator enrollment via USB.
Step 13: Boot up devices
- DEP linked iPads and iPhones will automatically enroll with the JSS.
- Configuration profiles, Apps, and Books will automatically download from the JSS.
- Self-Service will appear.
The Casper Suite integrates with mutual directory services, such as Active Directory, for user information and authentication to the Self-Service app. You can also scope profiles, apps, and books to directory user groups. Use the set-up assistant in the JSS to configure your directory services automatically.
Step 14: Enable your end users, give control to IT
- Update Self-Service with new content to inspire usage.
- Leverage Push Notifications to push important messages directly to all devices.
- Modify the JSS with smart groups and progressive reporting.
Step 15: Manage the lifecycle of your devices with reporting
- With an Apple Self-Servicing Account, you can integrate your Global Service Exchange Account with the Casper Suite to recover warranty and purchasing data straight from Apple’s global inventory database.
- View and sort your entire fleet’s warranty status in a single site.
- Use this data to determine when you should upgrade or replace your hardware.
Lastly, join JAMF Nation for ideas on how to improve deployment.
JAMF Nation is a knowledgeable community of Casper Suite users helping each other. This is a free service, open to all, whether you are a JAMF Software customer or not. Learn from other organizations that have already deployed iOS devices and gain best practices.