VN-MDM user guide
Documentation for an administrator. Each page covers one job: what the job is for, where to click, and what happens on the device.
When to open this page
You just received an account, or you need the right page before you do anything.
- 1 · InSign inRecognize the menu and your organization.
- 2 · DevicesEnrollCertificate, a manual link, or ADE.
- 3 · ConfigPush to devicesWi-Fi, passcode, compliance rules.
- 4 · AppleBusiness ManagerDevice serials and app licenses.
How to read this
- Words on buttons and menus stay in English, the same as on screen, for example Sign in and Devices.
- Pictures are from the demo organization Test Customer 1. Your organization name, email, and device names will be different. Enrollment codes in the pictures are blurred.
- To save a PDF: click Print or save PDF, then choose the printer Save as PDF.
- The menu on the left groups pages by job. Open one group when you need it, so you are not shown every page at once.
Start
| Page | What you do |
|---|---|
| Sign in to the console | Open VN-MDM and recognize the items on the top bar. |
| Appearance | Background, color, text density, logo, and the name on the menu bar. |
Apple — enroll an iPhone or iPad
| Page | What you do |
|---|---|
| Rollout map | Compare Supervised modes, choose an enrollment method, and see what each Settings → Apple item is for. |
| Push certificate | Check and replace the certificate so devices receive commands. |
| Manual enrollment | Create a link or a QR code, and install the profile on an iPhone or iPad. |
| Apple Business Manager | The organization account at Apple. From here the path splits: devices (ADE) and app licenses. |
| Connect ADE | Connect the device path of Apple Business Manager. |
| ADE devices | See serials synced from Apple. |
| ADE profile | The setup screens when a device is turned on for the first time. |
Everyday
| Page | What you do |
|---|---|
| Device list | Find a device, read its status, and see whether it has checked in. |
| Device groups | Gather devices so you assign the same profiles and apps. |
| One device | See information, profiles, apps, and command history. |
| Send a command | Lock a device, rename it, turn on Lost Mode, and other commands. |
Push to devices
These four travel to the device together, but each one does a different job. Do not put a screen passcode inside a Wi-Fi profile.
| Page | What you do |
|---|---|
| Configuration profiles | Wi-Fi, a web icon, restrictions, VPN. |
| Organization defaults | What every managed Apple device receives. |
| Device policies | Make the device set a screen passcode or update the operating system. |
| Compliance policies | Mark whether a device meets the rule. They do not change settings on their own. |
| App signing profiles | The file that lets a device run a company-built app. |
Apps
Licenses live at Apple. The app catalog lives in VN-MDM. The two pages go together.
| Page | What you do |
|---|---|
| App catalog | Choose an app, grant a license, and tell the device to install. |
| License token | Upload the Apps & Books token file from Apple Business Manager. |
| In-app configuration | Not open yet. The menu shows Soon. |
Each item in Settings → Apple
Apple Business Manager has no row in the left column. It is the account at Apple. The two items below are where you connect it to VN-MDM: ADE settings (devices) and Apps & Books (licenses).
| Item on screen | Page |
|---|---|
| Push & certificates | Push certificate |
| Manual enrollment | Manual enrollment |
| ADE settings | Connect ADE |
| ADE devices | ADE devices |
| ADE profiles | ADE profile |
| Defaults | Organization defaults |
| Configuration profiles | Configuration profiles |
| Provisioning profiles | App signing profiles |
| Compliance policies | Compliance policies |
| Device policies | Device policies |
| App config policies | App configuration — not open yet, labeled Soon |
| Apps & Books (VPP) | Apps & Books token |
Android
An Android phone goes through Google. One policy for one assignment target. Apps are Managed Play, not an Apple license.
- 1Connect GoogleService key and Managed Play.
- 2QR codeA device mode, then scan during setup.
- 3PolicyRestrictions, passcode, apps.
- 4CommandsLock, wipe, Lost Mode.
| Page | What you do |
|---|---|
| Android map | The order: connect Google, QR code, policy, apps. |
| Connect Google | Service settings: the .json key and the enterprise. |
| Enrollment QR | Three management modes and how long the code lasts. |
| Policies | Assign one policy. A new assignment replaces the old policy on the same target. |
| Apps | The Android tab in Apps & Books. |
| Commands | Lock, restart, wipe, Lost Mode. |
| Compliance | Not open yet. Labeled Soon. |
Windows
A PC enrolls from Windows Settings. Several profiles stack. The PC app catalog is not open yet.
- 1Turn on the serviceSwitch, password, server.
- 2On the PCAccess work or school.
- 3ProfilesWi-Fi, passcode, BitLocker.
- 4CommandsDefender, restart. Lock needs the helper.
| Page | What you do |
|---|---|
| Windows map | The order: turn on the service, enroll a PC, profiles, commands. |
| Turn on the service | Enrollment password, MDM server, helper, WNS. |
| Enroll a PC | What you do on the PC. |
| Profiles | Wi-Fi, passcode, restrictions, updates, BitLocker. |
| Commands | Lock, location, Defender, wipe. |
| Apps | The Windows tab is not open yet. |
| Compliance | Not open yet. Labeled Soon. |
Mac shares the Apple menu. These pages are written for iPhone and iPad. Steps that are only for Mac will come later.
Agent — privacy
| Page | What you do |
|---|---|
| Privacy notice templates | Copy the VI/EN template into Settings → Agent before enabling location collection. |