The EPS service can stage DEP-eligible Apple devices for enrollment into Workspace ONE. To request device enrollment, or to have DEP-eligible devices enabled for enrollment, please submit an EPS support request, selecting Workspace ONE from the 'Service' dropdown, DEP Enrollment from the 'Request Type' dropdown, and completing all fields.
Workspace ONE enrollment profiles may be exported and packaged for deployment by the EPS Multi-Tenant-Munki service, but only on macOS 10.15 and below, as macOS 11 has removed the ability to install any profiles using command-line tools such as Munki.
After a Workspace ONE enrollment profile has been installed by Munki, it must be manually approved on the device in order to complete enrollment. This only needs to be done once, and can be done by any user on the Mac, including a standard (non-admin) user. To approve an enrollment profile:
From the Apple Menu, select System Preferences, and locate the Profiles pane.
Open the Profiles pane and select the Device Manager profile. Note the 'Approve' button. (There may already be other Munki-installed profiles in place.)
Click 'Approve', and if prompted for confirmation, click 'Approve' again.
The Device Manager profile is now approved, and the device is fully enrolled in Workspace ONE.
**Please note that when enforcing SD card encryption, the Android security profile will ERASE unencrypted SD cards prior to encryption. For this reason, the EPS team strongly recommends that Android devices and SD cards be backed up prior to Workspace ONE enrollment in order to prevent accidental data loss.**
All supported platforms allow manual enrollment via the Workspace ONE agent.
Ensure that the device has a network connection (wired or wireless).
For Android, iOS, tvOS, and Windows 10, go to the app store for your device (Apple App Store, Google Play Store, or Microsoft Store); for macOS, go to https://www.getwsone.com/.
Search for and install the Workspace ONE agent.
Follow the prompts to enroll the device with your enrollment user, which must be a member of the AD group you supplied on your provisioning request.