Apple Device Management

Connection Requirements

1 - Domain

The hostname of the Apple DEP enrollment service.

Default: mdmenrollment.apple.com

2 - Obtaining Credentials

To obtain the required credentials, follow these steps:

1. Generate an RSA key pair: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

2. Sign in to Apple Business Manager, go to Settings, then MDM Servers.

3. Select an existing MDM server or click Add MDM Server, and upload the cert.pem file.

4. Download the Token file (.p7) and decrypt it with your private key: openssl smime -decrypt -inform smime -in fileFromApple.p7 -inkey key.pem

5. The decrypted file contains four values needed below: consumer_key, consumer_secret, access_token, and access_secret.

3 - Consumer Key

The OAuth consumer key from the decrypted token file. Prefixed with CK_.

4 - Consumer Secret

The OAuth consumer secret from the decrypted token file. Prefixed with CS_.

5 - Access Token

The OAuth access token from the decrypted token file. Prefixed with AT_.

6 - Access Secret

The OAuth access secret from the decrypted token file. Prefixed with AS_.

7 - Proxy

Proxy url. (optional)

8 - Timeout

The amount of time (in seconds) to wait for API responses. (default: 30)

Attention

This adapter fetches devices that are unassigned to an MDM. To fetch MDM-managed devices, use the respective adapter for your MDM solution (JAMF, Intune, etc.). Please perform a connection test to ensure there is a valid connection to the Apple Device Management service.