From 9ae5941d8cd049f100eac40eee66674e07eabb37 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Tue, 7 Feb 2023 16:03:30 -0500 Subject: [PATCH] Docs: MDM - pending hosts (#9728) - Explain what MDM status "Pending" means - Explain default team and how to update --- docs/Using-Fleet/Mobile-device-management.md | 26 ++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/docs/Using-Fleet/Mobile-device-management.md b/docs/Using-Fleet/Mobile-device-management.md index af7fddd7c4..b5733e443d 100644 --- a/docs/Using-Fleet/Mobile-device-management.md +++ b/docs/Using-Fleet/Mobile-device-management.md @@ -151,6 +151,8 @@ _Available in Fleet Premium_ Connect Fleet to your ABM account to automatically enroll macOS hosts to Fleet when they’re first unboxed. +If a new macOS host that appears in ABM hasn't been unboxed, it will appear in Fleet with **MDM status** set to "Pending." These hosts will automatically enroll to the default team in Fleet. Learn how to update the default team [here](#default-team). + To connect Fleet to ABM, get these four files using the Fleet UI or the `fleetctl` command-line interface: An ABM certificate, private key and server token. To do this, choose the "Fleet UI" or "fleetctl" method and follow the steps below. @@ -167,6 +169,30 @@ Fleet UI: 2. Follow the on-screen instructions. +#### Default team + +MacOS hosts purchases through Apple or authorized resellers will automatically enroll to the default team in Fleet when they're first unboxed. This means that Fleet will enforce the default team's settings on these hosts. + +> After a host enrolls it can be transferred to a different team. Learn how [here](./Teams.md#transfer-hosts-to-a-team). Transferring a host automatically enforces the new team's settings and removes the old team's settings. + +To change the default team, choose the "Fleet UI" or "fleetctl" method and follow the steps below. + +Fleet UI: + +1. In the Fleet UI, head to the **Settings > Integrations > Mobile device management (MDM)** page. Users with the admin role can access the settings pages. + +2. In the Apple Business Manager section, select the **Edit team** button next to **Default team**. + +3. Choose a team and select **Save**. + +`fleetctl` CLI: + +1. Create a `config` YAML document if you don't have one already. Learn how [here](./configuration-files/README.md#organization-settings). This document is used to change settings in Fleet. + +2. Set the `mdm.apple_bm_default_team` configuration option to the desired team's name. + +3. Run the `fleetctl apply -f ` command. + #### ABM Renewal The Apple Business Manager server token expires after a year or whenever the account that downloaded the token has their password changed. To renew the token, follow the [instructions documented in this FAQ](https://fleetdm.com/docs/using-fleet/faq#how-can-i-renew-my-apple-business-manager-server-token).