Automated Device Enrollment (aka DEP), is the preferred method for enrolling eligible devices into Workspace ONE. To request that a DEP-eligible device be registered for automated enrollment, please submit an EPS support request, selecting Workspace ONE from the 'Service' dropdown, DEP Enrollment from the 'Request Type' dropdown, and completing all fields.
**Please note that when enforcing SD card encryption, the Android security profile will ERASE unencrypted SD cards prior to encryption. For this reason, the EPS team strongly recommends that Android devices and SD cards be backed up prior to Workspace ONE enrollment in order to prevent accidental data loss.**
Non-DEP eligible devices may be manually enrolled into the service with the Workspace ONE Agent, the enrollment server URL, or with a specially-generated QR code. Endpoint Services recommends using either the Workspace ONE Agent or the enrollment server URL.
Manual Enrollment via the Workspace ONE Agent (Android, iOS, macOS, tvOS, and Windows)
Sign in to the device you wish to enroll and do the following:
Ensure that the device has a network connection (wired or wireless).
For Android, iOS, tvOS, and Windows 10, go to the app store for your device (Apple App Store, Google Play Store, or Microsoft Store); for macOS, go to https://www.getwsone.com/.
Search for and install the Workspace ONE agent.
Launch the agent and follow the prompts, providing either the server or email address.
For server address, enter http://mdm.cites.illinois.edu/devicemanagement/enrollment. When prompted for Group ID, enter the Group ID you provided in your Workspace ONE provisioning request.
Your Group ID can be determined by hovering over your unit instance in the Workspace ONE console.
For email address, provide the address of an enrollment user; if you are not sure, contact EPS.
Provide the enrollment user's credentials when prompted.
For older, non-DEP eligible Macs, Workspace ONE enrollment profiles may be exported and packaged for deployment by the EPS Multi-Tenant-Munki service, but only on macOS 10.15 and below, as macOS 11 has removed the ability to install any profiles using command-line tools such as Munki.
After a Workspace ONE enrollment profile has been installed by Munki, it must be manually approved on the device in order to complete enrollment. This only needs to be done once, and can be done by any user on the Mac, including a standard (non-admin) user.
To approve a Munki-installed enrollment profile:
From the Apple Menu, select System Preferences, and locate the Profiles pane.
Open the Profiles pane and select the Device Manager profile. Note the 'Approve' button. (There may already be other Munki-installed profiles in place.)
Click 'Approve', and if prompted for confirmation, click 'Approve' again.
The Device Manager profile is now approved, and the device is fully enrolled in Workspace ONE.