Enrolling iOS Devices Using a SOTI MobiControl Certificate

Before you begin

If the certificates bound to "Deployment Server Extensions and Web Console" and "iOS Profile Signing" are trusted third-party certificates and the setting "Require Trust Profile During Enrollment" is turned off, follow the instructions of Enrolling iOS Devices Using a Third-Party Certificate.

You must have created an add devices rule that establishes enrollment settings before you can complete this procedure. Additionally, if you want to install a device agent on your devices, create an application catalog rule that includes the device agent from the App Store and any targeted devices will immediately download the agent upon enrolling.

About this task

Note: On devices running iOS 10.3.3 or later, you will receive a warning prompt whenever the Enrollment Service requests access to the Settings app. Tap Allow to continue.

To enroll your iOS devices using the Enrollment Web Service:

Procedure

  1. On the iOS tab, select the Rules tab.
  2. Select the add devices rule that you want to use for enrolling iOS devices and make sure its details are displayed in the Information section. Make a note of the Enrollment URL.
  3. On your iOS device, open Safari and enter the Enrollment URL in the address bar.
    If you receive a popup stating that the browser cannot verify the server identity, click Continue to ignore it and proceed to the iOS Enrollment Service web page.
  4. If the add devices rule was configured with LDAP, enter the applicable credentials.
  5. Tap Step 1 to begin downloading the SOTI MobiControl Trust Profile.
    This profile installs the SOTI MobiControl Root CA certificate on your iOS device. It is required to verify the SOTI MobiControl Device Enrollment Profile.
  6. Tap Install to initiate the download. Once the Trust Profile has finished downloading, tap Install again to install the Trust Profile and continue with the enrollment process.
  7. Complete this step if the device is running iOS 10.3 or later: On your iOS device, navigate to Settings > General > About > Certificate Trust Settings and activate Enable Full Trust for Root Certificates for the certificate that was downloaded in the previous step. Return to Safari.
  8. Tap Step 2 to download the SOTI MobiControl Device Enrollment Profile. Tap Allow and then Install and then Install again to install the SOTI MobiControl device enrollment profile.
    When you tap Install, you will receive a warning message with a brief description of the purpose of the SOTI MobiControl Device Enrollment Profile. Tap Trust to continue.
  9. The installation process of the SOTI MobiControl Device Enrollment Profile includes several automatic steps that require no user interaction. Once the profile has finished installing on your device, tap Done.

Results

You will be returned to the Safari browser where you can see if the enrollment was successful.