Skip to main content
This guide applies to Mac computers, iOS devices, iPadOS devices, Apple TV, and Apple Vision Pro
Set up Apple platform integrations to protect and manage Mac computers, iPhones, iPads, Apple TV, and Apple Vision Pro from one place. You’ll configure APNs, Automated Device Enrollment (Apple Business Manager), and Apps and Books in that order.

​
Configure Apple Push Notification service (APNs)

APNs is required for communication with Apple devices. For best results, use a macOS computer.
1

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
2

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
3

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
4

Set up APNs

Under Apple Push Notifications service (APNs), click Set up APNs.
Screenshot of the Apple integrations section with Set up APNs button
5

Create an APNs certificate

Follow the on-screen instructions to create a new APNs certificate. Use a managed Apple account that multiple team members can access.
Do not attempt to use an existing APNs certificate. Create a new one specifically for Iru Endpoint.
APNs certificates must be renewed annually. Iru Endpoint will send email reminders to Team Members with Administrator or Account Owner permissions starting 30 days before certificate expiry. For renewal and troubleshooting, see Configure Apple Push Notification Service.

​
Configure automated device enrollment

Automated Device Enrollment enables zero-touch deployment for corporate-owned Apple devices. Apple Push Notification service must be configured in your tenant before you set up Automated Device Enrollment.
1

Enroll in Apple Business Manager

Enroll in Apple Business Manager (free; verification may take several days). Devices purchased from Apple or authorized resellers are automatically added to your account. To add existing devices, see Adding Devices to Apple Business Manager.
2

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
3

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
4

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
5

Set up ADE

Under Automated Device Enrollment, click Set up Automated Device Enrollment.
Screenshot of the Apple integrations section with Set up Automated Device Enrollment button
6

Complete setup

Follow the on-screen instructions to set up Automated Device Enrollment and click Done.
7

Assign devices in Apple Business Manager

In Apple Business Manager (or Apple School Manager), add Iru Endpoint as your MDM server and assign devices. Assigned devices will appear in Iru Endpoint as Awaiting Enrollment.

​
Configure Apps and Books

Apps and Books (formerly Volume Purchasing Program) lets you distribute App Store apps to devices. Apple Push Notification service must be configured in your tenant before you set up Apps and Books.
You cannot share the same Apps and Books token across multiple MDM servers. Create a new location in Apple Business Manager specifically for your Iru Endpoint tenant and use a dedicated token.
1

Create a dedicated location in Apple Business Manager

Create a new location in Apple Business Manager for your Iru Endpoint tenant.
2

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
3

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
4

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
5

Set up Apps and Books

Click the Set up Apps and Books button inside Apps and Books.
6

Sign in to Apple Business Manager

In the new window, sign in to Apple Business Manager to complete the integration.
7

Download and upload the location token

In Apple Business Manager, go to your profile (bottom-left) → Preferences → Payments and Billing. Download your Apps and Books Location Token, then return to the Iru Endpoint Web App and upload the token.
8

Complete Apps and Books setup

Click Complete Apps and Books setup.
For detailed information about each integration, see Configure Apple Push Notification Service, Configure Automated Device Enrollment, Configure Apps and Books, and Apple Integrations Overview.

​
Next Steps

After completing Apple setup:
1

Configure Blueprints and Library

Create and configure Blueprints so policies and apps are ready before enrollment. See Configuring Blueprints and Managing Library.
2

Enable other platforms (optional)

To manage Android or Windows devices as well, see Android Setup or Windows Setup.
3

Set up enrollment for each platform

Once Blueprints are configured, set up enrollment: Apple Enrollment, Windows Enrollment, or Android Enrollment.