Mobile Device Management Protocol Reference

Total Page:16

File Type:pdf, Size:1020Kb

Mobile Device Management Protocol Reference Mobile Device Management Protocol Reference Developer Contents 1 About Mobile Device Management 7 At a Glance ................................................ 8 The MDM Check-in Protocol Lets a Device Contact Your Server ................... 8 The MDM Protocol Sends Management Commands to the Device .................. 8 The Way You Design Your Payload Matters .............................. 8 The Device Enrollment Program Lets You Configure Devices with the Setup Assistant ........ 8 The Volume Purchase Program Lets You Assign App Licenses to Users and Devices ......... 9 Apple Push Notification Certificates Can Be Generated Through the Apple Push Certificates Portal .. 9 See Also ................................................. 9 2 MDM Check-in Protocol 10 Structure of a Check-in Request ...................................... 10 Supported Check-in Commands ..................................... 11 Authenticate Message ........................................ 11 TokenUpdate Message ........................................ 12 CheckOut .............................................. 13 3 Mobile Device Management Protocol 14 Structure of MDM Payloads ........................................ 16 Structure of MDM Messages ....................................... 18 MDM Command Payloads ......................................... 20 MDM Result Payloads ........................................... 20 MDM Protocol Extensions ......................................... 21 macOS Extensions .......................................... 21 Network User Authentication Extensions ............................... 23 iOS Support for Per-User Connections ................................ 26 Error Handling ............................................... 27 Handling a NotNow Response ....................................... 28 Request Types .............................................. 30 ProfileList Commands Return a List of Installed Profiles ....................... 30 InstallProfile Commands Install a Configuration Profile ........................ 30 RemoveProfile Commands Remove a Profile from the Device ..................... 31 ProvisioningProfileList Commands Get a List of Installed Provisioning Profiles ............ 31 InstallProvisioningProfile Commands Install Provisioning Profiles ................... 32 RemoveProvisioningProfile Commands Remove Installed Provisioning Profiles ............ 32 CertificateList Commands Get a List of Installed Certificates ..................... 32 InstalledApplicationList Commands Get a List of Third-Party Applications .............. 33 DeviceInformation Commands Get Information About the Device ................... 35 SecurityInfo Commands Request Security-Related Information .................... 40 2019-03-25 | Copyright © 2019 Apple Inc. All Rights Reserved. 2 DeviceLock Command Locks the Device Immediately ........................ 43 RestartDevice Commands Restart Devices .............................. 44 ShutDownDevice Commands Shut Down Devices .......................... 44 ClearPasscode Commands Clear the Passcode for a Device ..................... 45 EraseDevice Commands Remotely Erase a Device .......................... 45 RequestMirroring and StopMirroring Control AirPlay Mirroring .................... 45 Restrictions Commands Get a List of Installed Restrictions ...................... 47 Shared iPad User Commands Manage User Access ......................... 49 MDM Lost Mode Helps Lock and Locate Lost Devices ........................ 50 Managed Applications ........................................ 52 Installed Books ........................................... 62 Managed Settings .......................................... 65 Managed App Configuration and Feedback ............................. 69 AccountConfiguration ........................................ 72 Firmware (EFI) Password Management ................................ 73 SetAutoAdminPassword ....................................... 75 DeviceConfigured .......................................... 75 Software Update ........................................... 75 Extension Management ....................................... 80 Support for macOS Requests .................................... 82 Error Codes ................................................ 84 MCProfileErrorDomain ........................................ 84 MCPayloadErrorDomain ....................................... 84 MCRestrictionsErrorDomain ..................................... 85 MCInstallationErrorDomain ..................................... 85 MCPasscodeErrorDomain ...................................... 86 MCKeychainErrorDomain ...................................... 86 MCEmailErrorDomain ........................................ 86 MCWebClipErrorDomain ...................................... 87 MCCertificateErrorDomain ..................................... 87 MCDefaultsErrorDomain ....................................... 87 MCAPNErrorDomain ......................................... 87 MCMDMErrorDomain ........................................ 87 MCWiFiErrorDomain ......................................... 89 MCTunnelErrorDomain ....................................... 90 MCVPNErrorDomain ......................................... 90 MCSubCalErrorDomain ....................................... 90 MCCalDAVErrorDomain ....................................... 90 MCDAErrorDomain ......................................... 90 MCLDAPErrorDomain ........................................ 91 MCCardDAVErrorDomain ...................................... 91 MCEASErrorDomain ......................................... 91 MCSCEPErrorDomain ........................................ 91 MCHTTPTransactionErrorDomain .................................. 92 MCOTAProfilesErrorDomain ..................................... 92 MCProvisioningProfileErrorDomain ................................. 92 MCDeviceCapabilitiesErrorDomain ................................. 92 MCSettingsErrorDomain ....................................... 93 2019-03-25 | Copyright © 2019 Apple Inc. All Rights Reserved. 3 MCChaperoneErrorDomain ..................................... 93 MCStoreErrorDomain ........................................ 93 MCGlobalHTTPProxyErrorDomain .................................. 93 MCSingleAppErrorDomain ...................................... 93 MCSSOErrorDomain ........................................ 93 MCFontErrorDomain ........................................ 94 MCCellularErrorDomain ....................................... 94 MCKeybagErrorDomain ....................................... 94 MCDomainsErrorDomain ...................................... 94 MCWebContentFilterErrorDomain .................................. 94 MCNetworkUsageRulesErrorDomain ................................. 95 MCOSXServerErrorDomain ..................................... 95 MCHomeScreenLayoutErrorDomain ................................. 95 MCNotificationSettingsErrorDomain ................................. 95 MCEDUClassroomErrorDomain ................................... 95 MCSharedDeviceConfigurationErrorDomain ............................. 95 4 Device Enrollment Program 96 Device Management Workflow ...................................... 96 DEP Server Tokens ............................................ 97 Obtaining a Server Token ...................................... 97 Using DEP Server Tokens ...................................... 97 Authentication and Authorization ................................... 99 Web Services ............................................ 101 Common Error Codes ........................................... 133 5 VPP App Assignment 135 VPP in Apple School Manager ....................................... 135 Supporting VPP in Apple School Manager .............................. 136 Using Web Services ............................................ 136 Service Request URL ........................................ 136 Providing Parameters ........................................ 137 Authentication ............................................ 137 Service Response .......................................... 138 Retry-After Header ......................................... 139 VPP Account Protection ....................................... 139 Initial Import of VPP Managed Distribution Assigned Licenses Using getVPPLicensesSrv ....... 140 productTypeId Codes ........................................ 140 Managed Apple IDs ......................................... 140 Program Facilitators ......................................... 141 Error Codes ............................................. 142 The Services ............................................... 144 registerVPPUserSrv ......................................... 144 getVPPUserSrv ........................................... 145 getVPPUsersSrv ........................................... 147 getVPPLicensesSrv ......................................... 150 getVPPAssetsSrv .......................................... 153 contentMetadataLookupUrl ..................................... 155 2019-03-25 | Copyright © 2019 Apple Inc. All Rights Reserved. 4 retireVPPUserSrv .......................................... 158 manageVPPLicensesByAdamIdSrv .................................. 159 associateVPPLicenseSrv ....................................... 162 associateVPPLicenseWithVPPUserSrv ................................ 162 disassociateVPPLicenseSrv ..................................... 162 disassociateVPPLicenseFromVPPUserSrv .............................. 162 editVPPUserSrv ..........................................
Recommended publications
  • A Microkernel API for Fine-Grained Decomposition
    A Microkernel API for Fine-Grained Decomposition Sebastian Reichelt Jan Stoess Frank Bellosa System Architecture Group, University of Karlsruhe, Germany freichelt,stoess,[email protected] ABSTRACT from the microkernel APIs in existence. The need, for in- Microkernel-based operating systems typically require spe- stance, to explicitly pass messages between servers, or the cial attention to issues that otherwise arise only in dis- need to set up threads and address spaces in every server for tributed systems. The resulting extra code degrades per- parallelism or protection require OS developers to adopt the formance and increases development effort, severely limiting mindset of a distributed-system programmer rather than to decomposition granularity. take advantage of their knowledge on traditional OS design. We present a new microkernel design that enables OS devel- Distributed-system paradigms, though well-understood and opers to decompose systems into very fine-grained servers. suited for physically (and, thus, coarsely) partitioned sys- We avoid the typical obstacles by defining servers as light- tems, present obstacles to the fine-grained decomposition weight, passive objects. We replace complex IPC mecha- required to exploit the benefits of microkernels: First, a nisms by a simple function-call approach, and our passive, lot of development effort must be spent into matching the module-like server model obviates the need to create threads OS structure to the architecture of the selected microkernel, in every server. Server code is compiled into small self- which also hinders porting existing code from monolithic sys- contained files, which can be loaded into the same address tems. Second, the more servers exist | a desired property space (for speed) or different address spaces (for safety).
    [Show full text]
  • Openvms Record Management Services Reference Manual
    OpenVMS Record Management Services Reference Manual Order Number: AA-PV6RD-TK April 2001 This reference manual contains general information intended for use in any OpenVMS programming language, as well as specific information on writing programs that use OpenVMS Record Management Services (OpenVMS RMS). Revision/Update Information: This manual supersedes the OpenVMS Record Management Services Reference Manual, OpenVMS Alpha Version 7.2 and OpenVMS VAX Version 7.2 Software Version: OpenVMS Alpha Version 7.3 OpenVMS VAX Version 7.3 Compaq Computer Corporation Houston, Texas © 2001 Compaq Computer Corporation Compaq, AlphaServer, VAX, VMS, the Compaq logo Registered in U.S. Patent and Trademark Office. Alpha, PATHWORKS, DECnet, DEC, and OpenVMS are trademarks of Compaq Information Technologies Group, L.P. in the United States and other countries. UNIX and X/Open are trademarks of The Open Group in the United States and other countries. All other product names mentioned herein may be the trademarks of their respective companies. Confidential computer software. Valid license from Compaq required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s standard commercial license. Compaq shall not be liable for technical or editorial errors or omissions contained herein. The information in this document is provided "as is" without warranty of any kind and is subject to change without notice. The warranties for Compaq products are set forth in the express limited warranty statements accompanying such products. Nothing herein should be construed as constituting an additional warranty.
    [Show full text]
  • Deploying Ios and Tvos Devices Using Apple Configurator 2 and Jamf Pro
    Deploying iOS and tvOS Devices Using Apple Configurator 2 and Jamf Pro Technical Paper Jamf Pro 10.9.0 or Later 7 October 2020 © copyright 2002-2020 Jamf. All rights reserved. Jamf has made all efforts to ensure that this guide is accurate. Jamf 100 Washington Ave S Suite 1100 Minneapolis, MN 55401-2155 (612) 605-6625 Jamf, the Jamf Logo, JAMF SOFTWARE®, and the JAMF SOFTWARE Logo® are registered or common law trademarks of JAMF SOFTWARE, LLC in the U.S. and other countries. Apple, Apple Configurator 2, the Apple logo, Apple TV, iTunes, Mac, macOS, OS X, and tvOS are trademarks of Apple Inc., registered in the United States and other countries. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries. All other product and service names mentioned herein are either registered trademarks or trademarks of their respective companies. Contents Contents 4 Introduction 4 What's in This Guide 4 Additional Resources 5 Choosing a Deployment Method 6 Supervision Identities 6 Use a Supervision Identity from Apple Configurator 2 7 Create and Use a Supervision Identity from Jamf Pro 8 Automated Enrollment 8 Requirements 8 Deploying Devices Using Automated Enrollment 11 Manual Enrollment with an Enrollment URL 11 Requirements 11 Deploy Devices Using Manual Enrollment with an Enrollment URL 13 Further Considerations 14 Manual Enrollment with an Enrollment Profile 14 Requirements 14 Create an Enrollment Profile 14 Create and Upload the Supervision Identity 14 Create the "Prepare" Blueprint 15 Create the "Enroll" Blueprint 15 Deploy Devices Using Manual Enrollment with an Enrollment Profile 3 Introduction What's in This Guide This guide provides step-by-step instructions for deploying iOS and tvOS devices using Apple Configurator 2 and Jamf Pro.
    [Show full text]
  • Hidemyapp : Hiding the Presence of Sensitive Apps on Android
    HideMyApp : Hiding the Presence of Sensitive Apps on Android Anh Pham Italo Dacosta Eleonora Losiouk John Stephan EPFL, Switzerland EPFL, Switzerland University of Padova, Italy EPFL, Switzerland Kévin Huguenin Jean-Pierre Hubaux University of Lausanne, Switzerland EPFL, Switzerland Abstract patients [23], and there are around 325,000 mHealth apps available in major mobile app stores.2 Millions of users rely on mobile health (mHealth) apps to Given the sensitivity of medical data, the threats of pri- manage their wellness and medical conditions. Although the vacy leakage are one of the main hindrances to the success of popularity of such apps continues to grow, several privacy and mHealth technologies [37]. In this area, a serious and often security challenges can hinder their potential. In particular, overlooked threat is that an adversary can infer sensitive infor- the simple fact that an mHealth app is installed on a user’s mation simply from the presence of an app on a user’s phone. phone can reveal sensitive information about the user’s health. Previous studies have shown that private information, such as Due to Android’s open design, any app, even without per- age, gender, race, and religion, can be inferred from the list of missions, can easily check for the presence of a specific app installed apps [22,29,47]. With the increasing popularity of or collect the entire list of installed apps on the phone. Our mHealth apps, an adversary can now infer even more sensitive analysis shows that Android apps expose a significant amount information. For example, learning that a user has a diabetes of metadata, which facilitates fingerprinting them.
    [Show full text]
  • Of Epos SDK for Ios Cannot Find the Network Printer on Ios/Ipados 14 Or Later
    Workaround for an issue regarding 'Discovery' of ePOS SDK for iOS cannot find the network printer on iOS/iPadOS 14 Seiko Epson Corporation Dec 14th, 2020 Issue 'Discovery' of ePOS SDK for iOS cannot find the network printer on iOS/iPadOS 14 or later. Cause This issue depends on the specification change of iOS/iPadOS 14. From iOS/iPadOS 14 or later, users have to apply to Apple and change their implementation if the app sends broadcast or multicast messages. Because the ePOS SDK uses broadcast to search for printers. Workaround methods As of now, SEC thinks there are 2 workaround methods. 1. Version down of "Target" on "TARGETS" “General” " Deployment Info" to lower than iOS12.0 (iOS11.4 or before). Also, enable the local network in iOS settings. 1 / 6 2. If customer would like to use new function of iOS14 or later, user has to apply the "Multicast Networking Entitlement" on Apple Developer's site. <Condition: A & B> A. Tablet OS: iOS/iPadOS version is 14.0 or later. B. Using "Deployment Info" on "project" "Target" is iOS 12.0 or later <Procedure> It needs 3 steps. See below. Step1: Apply "Multicast Networking Entitlement" 1.1. Apply on Apple Developer website Link: <https://developer.apple.com/contact/request/networking-multicast> 1.2. Edit the application information as shown below a. App Name e.g. Epson TM Print Assistant b. App Store URL e.g. https://apps.apple.com/jp/app/epson-tm-print c. App Category e.g. business d. Describe the main purpose of your app e.g.
    [Show full text]
  • Mac OS 8 Update
    K Service Source Mac OS 8 Update Known problems, Internet Access, and Installation Mac OS 8 Update Document Contents - 1 Document Contents • Introduction • About Mac OS 8 • About Internet Access What To Do First Additional Software Auto-Dial and Auto-Disconnect Settings TCP/IP Connection Options and Internet Access Length of Configuration Names Modem Scripts & Password Length Proxies and Other Internet Config Settings Web Browser Issues Troubleshooting • About Mac OS Runtime for Java Version 1.0.2 • About Mac OS Personal Web Sharing • Installing Mac OS 8 • Upgrading Workgroup Server 9650 & 7350 Software Mac OS 8 Update Introduction - 2 Introduction Mac OS 8 is the most significant update to the Macintosh operating system since 1984. The updated system gives users PowerPC-native multitasking, an efficient desktop with new pop-up windows and spring-loaded folders, and a fully integrated suite of Internet services. This document provides information about Mac OS 8 that supplements the information in the Mac OS installation manual. For a detailed description of Mac OS 8, useful tips for using the system, troubleshooting, late-breaking news, and links for online technical support, visit the Mac OS Info Center at http://ip.apple.com/infocenter. Or browse the Mac OS 8 topic in the Apple Technical Library at http:// tilsp1.info.apple.com. Mac OS 8 Update About Mac OS 8 - 3 About Mac OS 8 Read this section for information about known problems with the Mac OS 8 update and possible solutions. Known Problems and Compatibility Issues Apple Language Kits and Mac OS 8 Apple's Language Kits require an updater for full functionality with this version of the Mac OS.
    [Show full text]
  • Apple Park “Spaceship” Campus Now Completed $5 Bil Expansion Net New Above Existing Cupertino HQ
    Industry Conference July 24, 2018 Introduction • Mark Kiehl, Air Services Development Manager • Drake Beaton, Principal Property Manager • Aaron Ushiro, Senior Architect • Magdelina Nodal, Senior Analyst • David Nissenson, Air Projects Consultant Courtesy • Please silence all cell phones Agenda • Air Traffic Update • Goals and Objectives • Prime Package Review • Expected Business Terms • The RFP Process Airport Traffic Update Presented by: Mark Kiehl SJC is Uniquely Located to Serve Silicon Valley Apple Employees: Residence Locations 60-70% of SV Company Employees Live in South Bay Contra Costa 1% San Francisco 14% OAK SFO Alameda 6% San Mateo 7% SJC Santa Clara 64% Santa Cruz 2% 7 Apple Park “Spaceship” Campus Now Completed $5 Bil Expansion Net New Above Existing Cupertino HQ Key Facts In Perspective − Additional facilities being built Diameter > Pentagon − Work space for 13,000 employees Area – would hold Levi’s 49ers Stadium − 2.8 million square feet floor space Office Sq. Ft > Empire State Building − 4.5 miles / 20 min drive from SJC Google Village Downtown San Jose Campus Plans Location is 2 Miles South of SJC 20,000 employee development in planning phases A combination of downtown San Jose parcels (enough for a mega-campus) has been acquired since late 2016 for over $135M. Planning for housing, retail, restaurants, open garden spaces. Site is also major transit hub for the region. 9 Adobe Systems’ Downtown San Jose Headquarters Example of “Google Village Effect” Adobe: Planning to dramatically expand its headquarters complex 4th
    [Show full text]
  • Mac Keyboard Shortcuts Cut, Copy, Paste, and Other Common Shortcuts
    Mac keyboard shortcuts By pressing a combination of keys, you can do things that normally need a mouse, trackpad, or other input device. To use a keyboard shortcut, hold down one or more modifier keys while pressing the last key of the shortcut. For example, to use the shortcut Command-C (copy), hold down Command, press C, then release both keys. Mac menus and keyboards often use symbols for certain keys, including the modifier keys: Command ⌘ Option ⌥ Caps Lock ⇪ Shift ⇧ Control ⌃ Fn If you're using a keyboard made for Windows PCs, use the Alt key instead of Option, and the Windows logo key instead of Command. Some Mac keyboards and shortcuts use special keys in the top row, which include icons for volume, display brightness, and other functions. Press the icon key to perform that function, or combine it with the Fn key to use it as an F1, F2, F3, or other standard function key. To learn more shortcuts, check the menus of the app you're using. Every app can have its own shortcuts, and shortcuts that work in one app may not work in another. Cut, copy, paste, and other common shortcuts Shortcut Description Command-X Cut: Remove the selected item and copy it to the Clipboard. Command-C Copy the selected item to the Clipboard. This also works for files in the Finder. Command-V Paste the contents of the Clipboard into the current document or app. This also works for files in the Finder. Command-Z Undo the previous command. You can then press Command-Shift-Z to Redo, reversing the undo command.
    [Show full text]
  • Linux Tutorial Last Updated: September 29 2021 for Windows Users
    VLAAMS SUPERCOMPUTER Innovative Computing CENTRUM for A Smarter Flanders Linux Tutorial Last updated: September 29 2021 For Windows Users Authors: Jasper Devreker (UGent), Ewan Higgs (UGent), Kenneth Hoste (UGent) Acknowledgement: VSCentrum.be Audience: This document is a hands-on guide for using the Linux command line in the context of the UGent HPC infrastructure. The command line (sometimes called ’shell’) can seems daunting at first, but with a little understanding can be very easy to use. Everything you do startsatthe prompt. Here you have the liberty to type in any commands you want. Soon, you will be able to move past the limited point and click interface and express interesting ideas to the computer using the shell. Gaining an understanding of the fundamentals of Linux will help accelerate your research using the HPC infrastructure. You will learn about commands, managing files, and some scripting basics. Notification: In$ commands this tutorial specific commands are separated from the accompanying text: These should be entered by the reader at a command line in a terminal on the UGent-HPC. They appear in all exercises preceded by a $ and printed in bold. You’ll find those actions ina grey frame. Button are menus, buttons or drop down boxes to be pressed or selected. “Directory” is the notation for directories (called “folders” in Windows terminology) or specific files. (e.g., “/user/home/gent/vsc400/vsc40000”) “Text” Is the notation for text to be entered. Tip: A “Tip” paragraph is used for remarks or tips. They can also be downloaded from the VSC website at https://www.vscentrum.be.
    [Show full text]
  • View Managing Devices and Corporate Data On
    Overview Managing Devices & Corporate Data on iOS Overview Overview Contents Businesses everywhere are empowering their employees with iPhone and iPad. Overview Management Basics The key to a successful mobile strategy is balancing IT control with user Separating Work and enablement. By personalizing iOS devices with their own apps and content, Personal Data users take greater ownership and responsibility, leading to higher levels of Flexible Management Options engagement and increased productivity. This is enabled by Apple’s management Summary framework, which provides smart ways to manage corporate data and apps discretely, seamlessly separating work data from personal data. Additionally, users understand how their devices are being managed and trust that their privacy is protected. This document offers guidance on how essential IT control can be achieved while at the same time keeping users enabled with the best tools for their job. It complements the iOS Deployment Reference, a comprehensive online technical reference for deploying and managing iOS devices in your enterprise. To refer to the iOS Deployment Reference, visit help.apple.com/deployment/ios. Managing Devices and Corporate Data on iOS July 2018 2 Management Basics Management Basics With iOS, you can streamline iPhone and iPad deployments using a range of built-in techniques that allow you to simplify account setup, configure policies, distribute apps, and apply device restrictions remotely. Our simple framework With Apple’s unified management framework in iOS, macOS, tvOS, IT can configure and update settings, deploy applications, monitor compliance, query devices, and remotely wipe or lock devices. The framework supports both corporate-owned and user-owned as well as personally-owned devices.
    [Show full text]
  • Apple Bonjour for Windows 7 32 Bit Downloadl
    Apple Bonjour For Windows 7 32 Bit Downloadl Apple Bonjour For Windows 7 32 Bit Downloadl 1 / 2 Download bonjour for windows 7 64 bit for free. Development Tools downloads - Bonjour SDK by Apple Inc. and many more programs are available for instant .... Download locations for Bonjour 1.0.6, Downloads: 9828, Size: 2.05 MB. Easily network your PC to an existing network. ... File section. File Type: Win32 EXE MIME Type: ... Company Name: Apple Inc. File Description: Bonjour .... You can download Bonjour for Windows from Apple's Bonjour support pages. Bonjour for Windows is bundled with Bonjour Print Services for .... Download Bonjour for Windows XP (32/64 bit) Free. ... Languages: English (en); Publisher Software: Apple Computer Inc; Gadgets: Desktop PC, Ultrabook, .... Bonjour, free and safe download. Bonjour latest version: A Free Networking Tool From Apple Computers. The Bonjour program was created by Apple as a .... Bonjour Print Services. Free Apple Windows XP/Vista/7/8/10 Version 2.0.2 Full Specs.. Apple's Bonjour is a software program that automatically manages ... With Microsoft Windows, it's optional, as long as your PC has no programs that require it. ... Rolls Out Bonjour Print Services for Windows as Free Download .... If you need help downloading or updating iTunes from the Microsoft Store, contact Microsoft for help. ... Windows 7 and 8 · Windows 10 ... Support; Bonjour; Apple Application Support 32-bit; Apple Application Support 64-bit.. Download Bonjour for Windows. ... Sistema operativo Windows 7 32 bit / Vista 32-bit / XP 32-bit / Windows 8; Licencia: Freeware (Gratis); Creador: Apple ... Bonjour para Windows es una aplicación útil y libre de Apple, con el que se crea ...
    [Show full text]
  • Usiness Manager Terms and Conditions Carefully Before Using the Service
    PLEASE READ THE FOLLOWING APPLE BUSINESS MANAGER TERMS AND CONDITIONS CAREFULLY BEFORE USING THE SERVICE. THESE TERMS AND CONDITIONS CONSTITUTE A LEGAL AGREEMENT BETWEEN INSTITUTION AND APPLE. BY CLICKING ON THE “AGREE” BUTTON, INSTITUTION, THROUGH ITS AUTHORIZED REPRESENTATIVE, IS AGREEING TO BE BOUND BY AND IS BECOMING A PARTY TO THIS AGREEMENT. IF INSTITUTION DOES NOT OR CANNOT AGREE TO THIS AGREEMENT, THEN CLICK THE “CANCEL” BUTTON. IF INSTITUTION DOES NOT AGREE TO THIS AGREEMENT, THEN INSTITUTION IS NOT PERMITTED TO PARTICIPATE. Apple Business Manager Agreement Purpose This Agreement permits You to participate in Apple Business Manager, which allows You to automate enrollment of Apple-branded devices for Mobile Device Management (MDM) within Your Institution, to purchase and manage content for such devices, to create Managed Apple IDs for Your users, and to access facilitation tools for related services. Note: You will need to have an MDM solution (e.g., Profile Manager from macOS Server or from a third-party developer) enabled within Your Institution so that you can utilize the features of this Service. An MDM solution enables You to configure, deploy, and manage Apple-branded devices. For more information, see https://www.apple.com/business/resources/. 1. Definitions Whenever capitalized in this Agreement: “Administrators” means employees or Contract Employees (or Service Providers) of Institution who have been added to the Service for purposes of account management, e.g., administering servers, uploading MDM provisioning settings,
    [Show full text]