Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.iru.com/llms.txt

Use this file to discover all available pages before exploring further.

This guide applies to Mac computers, iOS devices, iPadOS devices, Apple TV, and Apple Vision Pro
Apple Business Manager is now Apple Business. Apple School Manager is unchanged. For more information, see Introducing Apple Business and Apple Business Manager is now Apple Business.
Set up Apple platform integrations to protect and manage Mac computers, iPhones, iPads, Apple TV, and Apple Vision Pro from one place. You’ll configure Apple Push Notification service (APNs), Automated Device Enrollment (ADE), and Apps and Books in that order.

Configure Apple Push Notification service (APNs)

APNs is required for communication with Apple devices. For best results, use a macOS computer.
1

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
2

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
3

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
4

Set up APNs

Under Apple Push Notifications service, click Set up APNs.
Screenshot of the Apple integrations section with Set up APNs button
5

Create an APNs certificate

Follow the on-screen instructions to create a new APNs certificate. Use a managed Apple account that multiple team members can access.
Do not attempt to use an existing APNs certificate. Create a new one specifically for Iru Endpoint.
APNs certificates must be renewed annually. Iru Endpoint will send email reminders to Team Members with Administrator or Account Owner permissions starting 30 days before certificate expiry. For renewal and troubleshooting, see Configure Apple Push Notification Service.

Configure Automated Device Enrollment

Automated Device Enrollment enables zero-touch deployment for corporate-owned Apple devices. Apple Push Notification service must be configured in your tenant before you set up Automated Device Enrollment.
1

Enroll in Apple Business or Apple School Manager

Organizations enroll in Apple Business or Apple School Manager (both are free; verification may take several days). Devices purchased from Apple or authorized resellers are automatically added to your account. To add existing devices, see Adding Devices to Apple Business or Apple School Manager.
2

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
3

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
4

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
5

Set up ADE

Under Automated Device Enrollment, click Set up Automated Device Enrollment.
Screenshot of the Apple integrations section with Set up Automated Device Enrollment button
6

Start the wizard and obtain the PEM file

In the setup wizard, continue until Iru Endpoint provides a PEM public key file (download or save it when prompted). You will upload this file to Apple Business or Apple School Manager in the next steps.
7

Sign in to Apple Business or Apple School Manager

Sign in to Apple Business or Apple School Manager with a Managed Apple Account that can manage device management services.
8

Open the Devices tab

Click the Devices tab at the top of the page.
9

Open Management

In the left sidebar, click Management.
10

Add a device management service

Scroll to the bottom of the Management Services list and click Add next to Add device management service.
Apple Business or Apple School Manager Management Services list with Add device management service
11

Enter the service name

In the Service Name field, enter a name for this MDM integration (for example, Iru Endpoint).
12

Optional: Allow this service to release devices

If your organization needs it, select Allow this service to release devices.
13

Upload the PEM file

Upload the PEM file from Iru Endpoint.
14

Click Next

Click Next.
Add device management service form with Service Name, release devices option, and public key upload
15

Download the service token

Click Download Service Token.
Apple Business or Apple School Manager Download Service Token action
16

Click Done in Apple Business or Apple School Manager

Click Done.
17

Upload the token in Iru Endpoint

Return to Iru Endpoint and upload the .p7m service token file when prompted.
18

Complete the wizard in Iru Endpoint

Complete any remaining steps in the wizard and click Done.
19

Assign devices in Apple Business or Apple School Manager

In Apple Business or Apple School Manager, add Iru Endpoint as your Mobile Device Management (MDM) server and assign devices. Assigned devices will appear in Iru Endpoint as Awaiting Enrollment.

Configure Apps and Books

Apps and Books (formerly Volume Purchasing Program) lets you distribute App Store apps to devices. Apple Push Notification service must be configured in your tenant before you set up Apps and Books.
You cannot share the same Apps and Books token across multiple MDM servers. Create a new organizational unit in Apple Business or Apple School Manager specifically for your Iru Endpoint tenant and use a dedicated token.
1

Create a dedicated organizational unit in Apple Business or Apple School Manager

Create a new organizational unit in Apple Business or Apple School Manager for your Iru Endpoint tenant.
2

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
3

Open Integrations

Click the Integrations option in the menu.
Screenshot of the account menu with Integrations option highlighted
4

Select Apple

Under Platform integrations, select Apple.
Screenshot of the Integrations page with Apple platform selected
5

Set up Apps and Books

Click the Set up Apps and Books button inside Apps and Books.
6

Sign in to Apple Business or Apple School Manager

In the new window, sign in to Apple Business or Apple School Manager to complete the integration.
7

Open your organization menu

In Apple Business or Apple School Manager, click your organization name at the top right of the page.
8

Open Settings

Click Settings.
Apple Business or Apple School Manager with organization menu open and Settings option
9

Apps & Books in Settings

After you open Settings, you should already be on Payments & BillingApps & Books. This view is where your organization’s Apps and Books content tokens appear.
10

Download the content token

Under Content Tokens, click Download next to the token you want to use with Iru Endpoint.
Apple Business or Apple School Manager Payments and Billing Apps and Books Content Tokens with Download
11

Upload token to Iru Endpoint

Return to the Iru Endpoint Web App and upload your token.
12

Complete Apps and Books setup

Click Complete Apps and Books setup.
For detailed information about each integration, see Configure Apple Push Notification Service, Configure Automated Device Enrollment, Configure Apps and Books, and Apple Integrations Overview.

Next Steps

After completing Apple setup:
1

Configure Blueprints and Library

Create and configure Blueprints so policies and apps are ready before enrollment. See Configuring Blueprints and Managing Library.
2

Enable other platforms (optional)

To manage Android or Windows devices as well, see Android Setup or Windows Setup.
3

Set up enrollment for each platform

Once Blueprints are configured, set up enrollment: Apple Enrollment, Windows Enrollment, or Android Enrollment.