Course T3

Apple Enrollment

Stand up the Apple trust chain — APNs, Apple Business Manager, automated supervised enrollment across iPhone, iPad, Mac, and Apple TV — plus BYOD profile enrollment.

Core Partners4 lessons · 29 min · exam

iOSiPadOSmacOStvOS

Apple management runs on a chain of trust that partners must be able to set up blind: an APNs certificate for the communication channel, an Apple Business Manager account for device ownership, and a token exchange that binds the two to WeGuard. Get the chain right and iPhones, iPads, Macs, and Apple TVs enroll themselves — supervised, locked to management, with a setup experience you control.

This course covers the full loop: the trust setup, automated enrollment through ABM, Setup Assistant customization and supervised policies, and the honest limits of BYOD profile enrollment. You'll also learn the renewal discipline (APNs yearly, server token yearly) that keeps a customer's fleet from silently going dark.

Lessons

Apple MDM foundations

The trust chain behind every Apple deployment — APNs, ABM, supervision, and the four Apple settings surfaces in WeGuard.

Automated enrollment via ABM

The token exchange that binds Apple Business Manager to WeGuard — public key, MDM server, .p7m token, device assignment, and sync.

Setup Assistant & supervised policies

Shape the out-of-box experience — profile-removal lock, skip-screen categories per device type, and the supervised policy set.

BYOD profile enrollment

The non-ABM path — profile-based enrollment for personally owned iPhones and iPads, and its honest limits.

Final exam

Score 70% or higher to earn the certificate — valid two years, publicly verifiable.