fleet/docs/Using Fleet/MDM-setup.md

# Setup

To turn on macOS, iOS, and iPadOS MDM features, follow the instructions on this page to connect Fleet to Apple Push Notification service (APNs).

To use automatic enrollment (aka zero-touch) features on macOS, iOS, and iPadOS, follow instructions to connect Fleet with Apple Business Manager (ABM).

To turn on Windows MDM features, head to this [Windows MDM setup article](https://fleetdm.com/guides/windows-mdm-setup). 

## Apple Push Notification service (APNs)

Apple uses APNs to authenticate and manage interactions between Fleet and hosts.

To connect Fleet to APNs or renew APNs, head to the **Settings > Integrations > Mobile device management (MDM)** page.

> Apple requires that APNs certificates are renewed annually. 
> - If your certificate expires, you will have to turn MDM off and back on for all macOS hosts.
> - Be sure to use the same Apple ID from year-to-year. If you don't, you will have to turn MDM off and back on for all macOS hosts.

## Apple Business Manager (ABM)

> Available in Fleet Premium

To connect Fleet to ABM or renew ABM, head to the **Settings > Integrations > Automatic enrollment > Apple Business Manager** page.

After connecting Fleet to ABM, set Fleet to be the MDM for all Macs: 

1. Log in to [Apple Business Manager](https://business.apple.com)
2. Click your profile icon in the bottom left
3. Click **Preferences**
4. Click **MDM Server Assignment** and click **Edit** next to **Default Server Assignment**.
5. Switch **Mac**, **iPhone**, and **iPad** to Fleet.

New or wiped macOS, iOS, and iPadOS hosts that are in ABM, before they've been set up, appear in Fleet with **MDM status** set to "Pending".

All macOS hosts that automatically enroll will be assigned to the default team. If no default team is set, then the host will be placed in "No team". 

> A host can be transferred to a new (not default) team before it enrolls. In the Fleet UI, you can do this under **Settings** > **Teams**.

<meta name="pageOrderInSection" value="1500">
<meta name="title" value="Setup">
<meta name="description" value="Learn how to turn on MDM features in Fleet.">
<meta name="navSection" value="Device management">
Update Windows MDM setup article and MDM setup docs (#18981) - Update docs to reflect that, in order to use Autopilot, you must have one Intune license per host (from #fleetdm/confidential#6283) - Make "MDM setup" doc page cross platform - Cut content 2024-05-15 19:34:58 +00:00			`# Setup`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Device management > Setup and Commands docs: iOS/iPadOS (#19590) - Update "Setup" and "Commands" doc pages to mention iOS and iPadOS. 2024-06-12 22:30:46 +00:00			`To turn on macOS, iOS, and iPadOS MDM features, follow the instructions on this page to connect Fleet to Apple Push Notification service (APNs).`
MDM docs: Explain what happens automatically (#11260) - Add sentence to explain that Fleet installs fleetd automatically on hosts - Add sentence to explain that setup features require ABM - On MDM macOS settings page, add sentence that explains that Fleet automatically deploys a "Fleetd configuration" profile. 2023-04-21 21:16:46 +00:00
Device management > Setup and Commands docs: iOS/iPadOS (#19590) - Update "Setup" and "Commands" doc pages to mention iOS and iPadOS. 2024-06-12 22:30:46 +00:00			`To use automatic enrollment (aka zero-touch) features on macOS, iOS, and iPadOS, follow instructions to connect Fleet with Apple Business Manager (ABM).`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Update Windows MDM setup article and MDM setup docs (#18981) - Update docs to reflect that, in order to use Autopilot, you must have one Intune license per host (from #fleetdm/confidential#6283) - Make "MDM setup" doc page cross platform - Cut content 2024-05-15 19:34:58 +00:00			`To turn on Windows MDM features, head to this [Windows MDM setup article](https://fleetdm.com/guides/windows-mdm-setup).`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`## Apple Push Notification service (APNs)`
Update Windows MDM setup article and MDM setup docs (#18981) - Update docs to reflect that, in order to use Autopilot, you must have one Intune license per host (from #fleetdm/confidential#6283) - Make "MDM setup" doc page cross platform - Cut content 2024-05-15 19:34:58 +00:00
Device management > Setup and Commands docs: iOS/iPadOS (#19590) - Update "Setup" and "Commands" doc pages to mention iOS and iPadOS. 2024-06-12 22:30:46 +00:00			`Apple uses APNs to authenticate and manage interactions between Fleet and hosts.`
MDM docs: Explain what happens automatically (#11260) - Add sentence to explain that Fleet installs fleetd automatically on hosts - Add sentence to explain that setup features require ABM - On MDM macOS settings page, add sentence that explains that Fleet automatically deploys a "Fleetd configuration" profile. 2023-04-21 21:16:46 +00:00
MDM setup docs: APNs and ABM in the UI (#19463) 2024-06-07 21:33:00 +00:00			`To connect Fleet to APNs or renew APNs, head to the Settings > Integrations > Mobile device management (MDM) page.`
MDM docs: Explain what happens automatically (#11260) - Add sentence to explain that Fleet installs fleetd automatically on hosts - Add sentence to explain that setup features require ABM - On MDM macOS settings page, add sentence that explains that Fleet automatically deploys a "Fleetd configuration" profile. 2023-04-21 21:16:46 +00:00
MDM setup docs: APNs and ABM in the UI (#19463) 2024-06-07 21:33:00 +00:00			`> Apple requires that APNs certificates are renewed annually.`
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`> - If your certificate expires, you will have to turn MDM off and back on for all macOS hosts.`
			`> - Be sure to use the same Apple ID from year-to-year. If you don't, you will have to turn MDM off and back on for all macOS hosts.`
MDM docs: End user auth (#13130) - Add instructions for how to enable end user auth during automatic enrollment for Macs - Add instructions for how to add bootstrap package via UI 2023-08-04 19:44:14 +00:00
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`## Apple Business Manager (ABM)`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`> Available in Fleet Premium`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
MDM setup docs: APNs and ABM in the UI (#19463) 2024-06-07 21:33:00 +00:00			`To connect Fleet to ABM or renew ABM, head to the Settings > Integrations > Automatic enrollment > Apple Business Manager page.`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
MDM setup docs: APNs and ABM in the UI (#19463) 2024-06-07 21:33:00 +00:00			`After connecting Fleet to ABM, set Fleet to be the MDM for all Macs:`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`1. Log in to [Apple Business Manager](https://business.apple.com)`
			`2. Click your profile icon in the bottom left`
			`3. Click Preferences`
Update setup instructions for macOS MDM (#15518) - Clarify instructions - Add bold text style to UI elements 2023-12-11 15:02:50 +00:00			`4. Click MDM Server Assignment and click Edit next to Default Server Assignment.`
iPhones and iPads can automatically enroll (#20124) - Update ABM docs 2024-07-01 20:04:42 +00:00			`5. Switch Mac, iPhone, and iPad to Fleet.`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Device management > Setup and Commands docs: iOS/iPadOS (#19590) - Update "Setup" and "Commands" doc pages to mention iOS and iPadOS. 2024-06-12 22:30:46 +00:00			`New or wiped macOS, iOS, and iPadOS hosts that are in ABM, before they've been set up, appear in Fleet with MDM status set to "Pending".`
MDM docs: Add macOS setup page (#11192) - Add "macOS setup" page - Add "Bootstrap package" section - Add "End user authentication" and "macOS Setup Assistant" stub sections 2023-04-19 13:39:48 +00:00
Device management > Setup and Commands docs: iOS/iPadOS (#19590) - Update "Setup" and "Commands" doc pages to mention iOS and iPadOS. 2024-06-12 22:30:46 +00:00			`All macOS hosts that automatically enroll will be assigned to the default team. If no default team is set, then the host will be placed in "No team".`
MDM docs: End user auth (#13130) - Add instructions for how to enable end user auth during automatic enrollment for Macs - Add instructions for how to add bootstrap package via UI 2023-08-04 19:44:14 +00:00
Update "Team member" wording in docs to reference users instead. (#17116) + Changed a bunch of instances of "member" to "user" to match the updated UI (https://github.com/fleetdm/fleet/issues/15893) + Cut some step-by-step instructions for using the team UI from the "Segment hosts" docs 2024-02-29 21:07:59 +00:00			`> A host can be transferred to a new (not default) team before it enrolls. In the Fleet UI, you can do this under Settings > Teams.`
MDM docs: End user auth (#13130) - Add instructions for how to enable end user auth during automatic enrollment for Macs - Add instructions for how to add bootstrap package via UI 2023-08-04 19:44:14 +00:00
Windows MDM docs: turn on Windows MDM (#13943) - Add new "Windows setup" page to "Device Management" section of docs - Rename "MDM setup" page to "macOS setup." Update links and add redirect - Rename existing "macOS setup" page to "macOS setup experience." Update links. Did not add redirect because of conflict with "macOS setup" page - Remove "MDM" from all MDM doc page titles 2023-10-04 19:39:09 +00:00			`<meta name="pageOrderInSection" value="1500">`
Update Windows MDM setup article and MDM setup docs (#18981) - Update docs to reflect that, in order to use Autopilot, you must have one Intune license per host (from #fleetdm/confidential#6283) - Make "MDM setup" doc page cross platform - Cut content 2024-05-15 19:34:58 +00:00			`<meta name="title" value="Setup">`
			`<meta name="description" value="Learn how to turn on MDM features in Fleet.">`
MDM docs: typo (#13159) Fix typo 2023-08-04 21:17:13 +00:00			`<meta name="navSection" value="Device management">`