Devices

Activity

Apple Business API

OAuth 2 client credentials with ES256 JWT — the new ABM API (Client ID + Key ID + private key from business.apple.com).

Org devices (0)

Classic DEP server token

Legacy mdmenrollment.apple.com OAuth 1.0 flow — only if you also use an MDM server token (.p7m).

Import server token

Upload the server token (.p7m) downloaded from ABM after adding the public key.

DEP devices (0)

Automated Device Enrollment (ADE)

After DEP token import, define an enrollment profile with Apple and assign it to ABM devices. Erased devices then auto-enroll during Setup Assistant as supervised.

Assign devices to this MDM server in ABM first, then run Setup ADE. To re-enroll an existing iPad: erase it and go through Setup Assistant again.

Push certificates

Use mdmcert.download to obtain an Apple MDM push certificate, then activate it for instant command wake.

Identity (CSR subject)

Step 1 — Prepare mdmcert

Generates the push CSR and PKI encryption certificate on the server.

Step 2 — Submit to mdmcert.download

Uses the identity email above. You must be verified at mdmcert.download first.

Step 3 — Decrypt mdmcert email

Import the encrypted attachment from the mdmcert email.

Step 5 — Activate push certificate

Change password

Update the password for your signed-in account.