Skip to content
Guide contents

Connect Apple Business Manager (ADE)

ADE lets a company device enroll itself in VN-MDM when it is turned on, or after a wipe, without a Safari link.

When to use thisThe organization already has Apple Business Manager, and devices were assigned there by the vendor or a reseller.
  1. 1ABMApple holds the company-device serials.
  2. 2 · This pageConnect the serverA public key and a .p7m token.
  3. 3SerialsThe list Apple has sent back.
  4. 4Setup profileSetup screens and supervision.

App licenses do not pass through this page. That file is the Apps & Books token, on License token.

Open Settings → Apple → ADE settings. The page is named Apple ADE (ABM).

Enrollment identity

Before a device can download a profile, click Generate identity in the block at the top. Each customer has its own. Another customer does not share it. A device that already enrolled keeps the previous certificate until it enrolls again. Regenerating does not change a device that already has the profile.

ADE page with four finished steps: Public key, Server token, Validate account, Sync devices
The ABM connection steps. Enrollment identity is a separate step above the public key. This demo is already connected: the key exists, and the server token is present and valid through 2027.

Four connection steps

  1. Public key. Download the PEM file (the Download PEM button once the key exists). In Apple Business Manager: Settings → Device Management → MDM Server, create or open the MDM server, then upload this public key.

  2. Server token. Apple Business Manager lets you download a .p7m file. Put that file in the Upload box on this page and upload it. Status becomes Configured. Note the Token expires date — when it expires you must download a new token from Apple and upload it again.

  3. Validate account. Confirm that Apple recognizes the organization. The organization name appears in the account block further down the page (scroll if you do not see it yet).

  4. Sync devices. Scroll to the Device catalog sync block. Diff sync fetches what changed since the last sync — use it when you are checking for new devices. Full fetch downloads the whole list again and drops serials that are no longer at Apple. View ADE devices opens the serial list. Then create an ADE profile.

Regenerate & download creates a new key. The old key in Apple Business Manager will no longer match. Click it only when you mean to start over and will upload the new key to Apple.

Common questions

There is no Apple Business Manager yet?
ADE cannot be connected yet. Read What ABM is to see where Apple reviews the organization, and use manual enrollment while you wait. Registering with Apple can take one to two weeks.
It is connected, but a newly purchased device does not appear?
The seller must assign the serial to your MDM server in Apple Business Manager. Then sync at step 4, and open ADE devices.

Still stuck?

Call or message our support team on Zalo, or request a trial and we will walk you through it.

Contact supportZalo
Zalo