Endpoint Services, Workspace ONE, Enrolling Devices into Workspace ONE

How to enroll devices into the Workspace ONE service.


Workspace ONE Unified Endpoint Management (UEM)

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service Workspace ONE UEM

General Information

Once your unit has been provisioned in Workspace ONE, you may begin enrolling devices using one of the following methods and managing them in the Workspace ONE console.

Automated Device Enrollment / Device Enrollment Program / DEP (iOS, macOS, and tvOS)

Automated Device Enrollment (aka DEP), is the preferred method for enrolling eligible devices into Workspace ONE. To request that a DEP-eligible device be registered for automated enrollment, please submit an EPS support request, selecting Workspace ONE from the 'Service' dropdown, DEP Enrollment from the 'Request Type' dropdown, and completing all fields.

Learn more about Apple's Device Enrollment Program.

Ensure that your device purchases are DEP-eligible.

Manual Enrollment

**Please note that when enforcing SD card encryption, the Android security profile will ERASE unencrypted SD cards prior to encryption. For this reason, the EPS team strongly recommends that Android devices and SD cards be backed up prior to Workspace ONE enrollment in order to prevent accidental data loss.**

Non-DEP eligible devices may be manually enrolled into the service with the Workspace ONE Agent, the enrollment server URL, or with a specially-generated QR code. Endpoint Services recommends using either the Workspace ONE Agent or the enrollment server URL.

Manual Enrollment via the Workspace ONE Agent (Android, iOS, macOS, tvOS, and Windows)

Sign in to the device you wish to enroll and do the following:

Manual Enrollment via Enrollment Server URL (macOS and Windows

Sign in to the device you wish to enroll and do the following:

Multi-Tenant-Munki (macOS 10.15 and below)

For older, non-DEP eligible Macs, Workspace ONE enrollment profiles may be exported and packaged for deployment by the EPS Multi-Tenant-Munki service, but only on macOS 10.15 and below, as macOS 11 has removed the ability to install any profiles using command-line tools such as Munki.

After a Workspace ONE enrollment profile has been installed by Munki, it must be manually approved on the device in order to complete enrollment. This only needs to be done once, and can be done by any user on the Mac, including a standard (non-admin) user.

To approve a Munki-installed enrollment profile:

Contact the EPS team