School Information

Mobile Device Management Setup Overview This guide is intended to allow you to set up MDM from scratch in a school that has not used volume purchase or Apple configurator before. It does not give explicit instructions on how to transfer codes between configurator and MDM, or how to transfer from using configurator to using MDM.

Create Email Accounts Create the following email addresses in owaadmin. Use “generic group user” option, and just enter the name into the surname box. Make sure they are in the “Staff” OU •

ipadvpp

This is for signing up to the VPP and will be the program manager

•

iPad

This is the host mailbox account for the individual Apple IDs

Additional Mailboxes You now need to ask consultants to create additional email addresses attached to the iPad account. You will need one for each iPad in school and they should be named ipadXX (where XX is a number) for clarity and consistency.

Sign Up Once the mailbox creation script has been run on your new accounts and all addresses are active, you need to sign up to the following.

Volume Purchase Program Visit www.apple.com/uk/education/it/vpp/ and select “Enrol Now” Fill out the information requested. Use the ipadvpp@ email address. This will create the AppleID. During the process it is suggested to use the school business manager or the IT Co-ordinator as the main contact name, and the head teacher as the supervisor name. Use the ipadvpp@ for the contact email and the heads email for the supervisor.

School type is Public/State, and K-12 is the correct choice for grade.

You will need to know the school’s VAT status and if they are exempt; their VAT number. There is a reference sheet at the end of this document with the majority of them in. School’s Finance Unit will also know if the school rings them and asks.

Double-check all the information is correct before submitting. You then have to wait up to 5 working days for the authorisation to come through. It will come to the ipadvpp account.

Apple IDs & iTunes Accounts This is repetitive and if done manually will take approx. 1hr per 16, but it only needs to be done once for each iPad. Mal also has a script you can use to do this which at time of writing is in testing phase.

Please note that we can now whitelist school email domains given 5 days notice if you speak to JohnE so that you can create as many AppleIDs as you need in one go.

It is a good idea to use the same information for each Apple ID so that you can reset them easily. You will need to decide upon the following: •

Date of birth (1/1/1980 is suggested)

•

3 x security questions & answers

•

Rescue email address (ipadapps@ is suggested)

•

Password (Can be as complex as you like, only needed once)

•

Name & Address etc. – should match school.

Once you have decided on the above, follow this process until all Apple IDs are created, do this within iTunes: Follow the instructions at http://support.apple.com/kb/ht2534 (select creating an account on a computer) Ensure you select “None” as a payment method, and also make sure to verify the account via email.

Remember, all the individual accounts will redirect to the iPad account you created earlier, so you only need to logon to one email account for the whole process. It is best practice to delete each email after verification to avoid confusion.

Sign out of iTunes (select ipadXX@school on the top bar, then select sign out) then repeat for the next Apple ID.

Cisco Meraki Visit https://account.meraki.com/login/signup and sign up using the ipadapps@ account. Make sure to verify the email address and set a secure password, making note of it. Use sensible information at all points.

Configuration You should only proceed with this if the following conditions are met: •

Apple have accepted the VPP submission

•

You have created the same number of Apple IDs as there are iPads

•

You have signed up to Cisco Meraki (or other MDM)

Volume Purchase Program Now Apple have accepted the VPP request you need to complete the process.

Visit http://www.apple.com/uk/education/it/vpp/ and select “Enrol Now” Select “United Kingdom” from the drop down list and select continue.

Log in with ipadvpp@ account you created before. You will now see the screen showing the submission has been accepted. Complete the process, accepting terms and conditions until you are delivered to the Program Manager page.

Once completed, close the browser window that has the program manager logged in, then visit http://www.apple.com/uk/education/it/vpp/ and select “Registered Users Login” Sign in with ipadvpp@school account, and password you chose earlier. You should get a screen saying you’re not configured with the VPP store, click continue and it should then ask for acceptance of terms and conditions, then deposit you at the VPP store.

Select Account Summary (Click on ipadvpp@school) and then select “Download Token” next to Managed Distribution section. Make a note of where the file was saved.

Cisco Meraki Log into https://account.meraki.com/login/login with the username and password you created before.

You may be asked to create a new “Network” if you do, then name it after the school.

Select Organisation > Settings Under “iOS Device Management”, there are instructions on how to generate and import a Push Certificate. Follow these instructions. Use ipadvpp@ account to generate the certificate. Once it’s made, click the Download button to save a copy of the certificate, then upload into Meraki. Make sure you save the page when you’ve uploaded the certificate.

Under “Apple Volume Purchase Program Managed Distribution” select “Add an Apple VPP Account” Enter the following info: Name: Name of school Account email: ipadapps@school VPP Token: Open the token file you downloaded Click “Save Changes” You should now have a push certificate uploaded and working, and a VPP token uploaded.

Select Organisation > Apple VPP You should now see it synchronising data with Apple (there will be nothing in here at the moment) but it’s an indicator of everything being OK so far.

Select User Management > Add User (right hand side) Name: <School> iPadXX (e.g. KWest Ipad23) Email: ipadXX@school Notes: Blank (unless you want to add any) Select OK and then repeat the above for every iTunes account you need to add to VPP. Once you have added them all, select all and send the invitation request.

Go through iPad inbox and respond to each request. You must do this from a computer with at least Windows 7 and iTunes installed. When you click the invitation link, it will ask you to sign in with the correct Apple ID for the invitation, then you need to accept terms and conditions. The AppleID is named in the email so you know which one to use. ** DO NOT FORGET TO SIGN OUT OF ITUNES (DON’T JUST CLOSE IT) AFTER EACH ACCEPTANCE** On Meraki dashboard, go to Organisation > Apple VPP > User Management to check the status of each invitation.

Deployment Join iPads to Meraki Connect each iPad to the SICT Unit’s MacBook Air and supervise it – changing the options to reflect the school they are being assigned to. You must change the name (e.g. Eagley Infant 1 or St Michael 1) and the Organisation Info.

Once all devices supervised, go to the Supervision tab, create a new group in the left hand column (press the small + icon) named for the school and move all the school iPads from the “All Devices” group into this group by dragging and dropping them.

On each iPad, go through the initial setup, connect to a Wi-Fi network and tap get started.

Open Safari web browser, and go to m.meraki.com On your Meraki Dashboard, select MDM > Add Devices. There will be a short code displayed which allows clients to join the MDM. Enter the code displayed here into each of the iPads (it will be the same code for all devices) and accept/install as prompted until it says “Success – Look for device in dashboard” Sign each iPad into the correct iTunes account matching the device name (you can check this by pressing the power button, waiting a second and pressing it again) To sign into iTunes tap Settings > ITunes, enter the username and password, and leave the update option at default, but do not turn on automatically install apps

Install Profiles & Apps Profiles On Cisco Meraki dashboard, select MDM > Profiles then select Add New > New Mobile Profile on the right hand side.

Configuration: Use the Meraki Dashboard to create a configuration profile Name: Use the school name here Description: Enter some descriptive text Removal Policy: Require password to remove this profile Password: Enter a strong password Scope: Apply to All Devices group (or you can limit the scope by tagging clients in Key Stage groups for example, this is not covered in this guide) You will then see a list of clients this will affect. Click Save Changes to be returned to the profiles screen. You can now click “Edit Profile Settings” near the top of the screen In the edit screen you can set the restrictions and options the school requires.

Apps To install apps follow this process for both free and paid apps: Visit www.apple.com/uk/education/it/vpp/ and log in with the ipadapps account Search for the app you want If it is free you just enter the number of licenses you require If it is paid you need to ensure a payment method has been set up, then enter the number of licenses you require, taking care to select the “Managed Distribution” type of codes.

Once the app store tells you that your purchase has been successful, you can continue purchasing apps.

When you have purchased all apps, you will need to wait a couple of minutes before they are all populated into Meraki. You can click ipadapps@school and then Purchase History to see the current state of the app purchase (it will say Processing if not done yet) To install the apps, in Meraki, visit MDM > VPP You will see a list of known apps associated with this account, and be able to see details such as how many licenses remain etc. At the bottom of the page is a dropdown box to select how many apps to view at once, change this to “All” If you want to install all apps on all iPads easily, click on the tick box at the top of the name lists, this will select all apps. You then click “Edit Auto Management” and tick the box “Auto-grant licenses to users in scope” If you just want certain apps on certain iPads then you need to click the name of the App, select the AppleIDs you wish to send the app to and click Grant Licenses to Users. This does not install the app, just grants a licence to use it.

You then need to go to MDM > Apps, click New > iOS App, enter the app name, ensure it is targeted at the correct devices (defaults to all devices) and click OK. This will then install the app.