Set up Apple MDM

Using these steps, you will configure JumpCloud as a Mobile Device Management (MDM) server.

Summary: You will download a Certificate Signing Request (CSR) from the JumpCloud Admin Portal; this unique CSR contains your organization’s MDM configuration within JumpCloud. Next, you will log in to the Apple Push Certificate Portal and upload the CSR file. Apple validates JumpCloud's information and issues a push certificate with the public key included in the CSR. After you download the push certificate, upload it to JumpCloud to create a secure connection.

Prerequisites:

• An Apple ID is required to set up the Apple Push Notification service (APNs).

• Confirm that each user’s local account username matches either their JumpCloud username or the value in the Local User Account field in JumpCloud.
  • JumpCloud can only take over existing usernames if they match between OS and JumpCloud. Mismatches will cause JumpCloud to provision new user accounts with the JumpCloud username and create confusion. See Take Over an Existing User Account with JumpCloud.

Configuring MDM

1. Log in to the JumpCloud Admin Portal.
2. Go to DEVICE MANAGEMENT > MDM.
3. Under Configure Apple MDM, click Configure MDM.
4. Under Download Your CSR, click Download CSR and save the file.

5. Under Sign in to Apple Push Certificate Portal, click Go to Apple or log in to the Apple Push Certificates Portal directly: https://identity.apple.com/pushcert. 
6. Click Create a Certificate. 

7. If prompted, review Apple’s Terms of Use and click Accept. 
8. Upload your JumpCloud CSR file. To do so:
   1. Click Choose File and select the JumpCloud CSR file. 
   2. Click Open.
   3. Click Upload. See below.

9. Enter your company Apple ID. This is the same account that you used to log in to the Apple Push Certificates Portal.

10. Click Download to download the new certificate (for example, MDM_JumpCloud_certificate.pem).
11. In the JumpCloud Admin Portal, under Upload MDM Push Certificate on the Set Up Apple MDM Certificate page, click Browse to find the Apple Push Certificate or drag and drop the file.
12. Click complete setup. A message on the MDM home tab indicates that MDM is configured.

Renewing Your MDM Certificate

You need to renew your MDM certificate yearly to continue to securely monitor your organization’s devices. When your MDM certificate is expiring, you will see a yellow icon that reads “Expiration Warning”. If the certificate has expired, the icon will be red and read “Certificate Expired.”

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com.
2. Go to DEVICE MANAGEMENT > MDM.
3. On the MDM home page, click renew under APNs Configuration for MDM.
4. In the Renew MDM Configuration page, click Download CSR under Download Your CSR, and then save the file.
5. Under Sign in to Apple Push Certificates Portal, click Go To Apple or log in to the Apple Push Certificates Portal: https://identity.apple.com/pushcert. 
6. In the Apple Push Certificates Portal, select your certificate and click Renew.

7. Click Choose File, select your CSR file (for example, download-mdm.csr), then click Open.
8. Click Upload to renew the push certificate.

9. On the Apple Confirmation page, click Download and save the new certificate (for example, MDM_JumpCloud_certificate.pem), and then click Save.
10. Enter your Apple ID. 
     

11. In the JumpCloud Admin Portal, click Browse under Upload MDM Push Certificate to locate the Apple Push Certificate and click Open. You can also drag and drop the file.
12. Click complete renewal. A message on the MDM home tab indicates that your MDM configuration was renewed.

Removing Your MDM Configuration

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com.
2. Go to DEVICE MANAGEMENT > MDM.
3. On the MDM Home page, click Delete under APNs Configuration for MDM.
4. Enter the number of devices that you want to unenroll from MDM. You must enter the total for all the devices that are enrolled in MDM.

5. Click Delete MDM Configuration.