Device Enrollment Program (DEP) FAQ

This document aims to clarify some common questions associated with Apple DEP and with using DEP through Lightspeed Systems Mobile Manager. We will update it with the latest information and new questions that arise.

Q: What countries are Apple’s DEP (Device Enrollment Program) available?

A: For now, it is available in Australia, Belgium, Canada, Denmark, Finland, France, Germany, Greece, Hong Kong, Ireland, Italy, Japan, Luxembourg, Mexico, Netherlands, New Zealand, Norway, Singapore, Spain, Sweden, Switzerland, Taiwan, Turkey, United Arab Emirates, United Kingdom, and the United States (as of 11/2014). For current updates, please check with Apple.

Q: How do I sign up for DEP?

A: Go to deploy.apple.com and follow the steps to enroll your organization in DEP (Device Enrollment Program). It can take approximately a week to receive approval if all your information is complete and accurate. We encourage you to sign up now even if you are not planning to utilize it right away. You can learn more about Apple DEP here.

Q: What are the advantages of using DEP?

A: Apples DEP offers the following advantages:

  • It simplifies the enrollment process by allowing wireless and supervised enrollment of devices without the use of the Apple Configurator or carts.
  • You can prevent students from removing profiles.
  • Simplifies the enrollment process.
  • Can be used to assist with recovery of a lost or stolen device.
  • Any new devices from Apple will be automatically added to the DEP account.

Q: What iOS do iPads need to be at for DEP? 7 or the latest 7.1.1?

A: Apple’s Device Enrollment Program (DEP) is for iOS 7+ and OS X 10.9+ (Mavericks).

Q: How do I know if devices are in DEP?

A: Go to Settings, General, Profiles, and choose the Mobile Manager profile. If there is no option to remove the profile, then you know they are enrolled in DEP.

Q: How do you add a device into DEP?

A: There are two ways: by serial number or by Apple order number. Once the servers are set up, you can choose between those. Note: Please be aware that devices purchased more than 3 years prior to the date of your DEP enrollment are not eligible.

Q: Can you enroll a device in DEP while the user is using it?

A: Yes, but no changes will occur until the device is reset.

Q: What ports need to be open for DEP?

A: There are no additional ports that are needed for DEP. For a complete list of ports needed for the Lightspeed Systems Mobile Manager, click here.

Q: Do I need to have an open wifi for the DEP install?

A: Yes, during the initial setup.

Q: Once devices are added to DEP, can they ever be removed?

A: Devices may be removed from Apple’s DEP for whatever reason; however, to preserve the chain of custody these devices may never again be added to DEP.

Q: I understand that devices over three years old cannot be included with Apple’s Device Enrollment. Does this mean that I cannot use DEP once the devices pass that age restriction?

A: No. The restriction is for adding new devices only. Once a device has been added, you can enroll that device indefinitely.

Q: Can I restore a device that has been newly added to DEP with a previous backup?

A: It is possible to restore a device from a backup created before it was added to DEP, but it is not recommended because the backup will not contain the correct supervision profile. If this should occur, then the device will need to be reset to factory defaults before it will regain the correct DEP settings.

Q: DEP is not available in my country. Do you have any additional information on DEP availability in my country?

A: We do not have any additional information on this. For more information, contact Apple.

Q: Will this work for iPads we already own? We don’t have to touch them?

A: Apple is allowing devices that have been purchased within three years to be enrolled in DEP. To activate this the device will need to be reset to factory defaults.

Q: Does Apple DEP only work with purchased devices from Apple and not from resellers?

A: Apple DEP works with devices purchased through them for DEP and with devices purchased from resellers and carriers that support the DEP program. Check with your reseller or carrier for further information.

Q: Will the recovery of a US device be available if taken out of the country? So, if stolen and taken abroad, how will the MDM help?

A: For iOS devices enrolled through DEP recovery might be difficult but the device can be prevented from use.

Q: Can the Apple DEP be used with only a select group of devices, or is it an all or nothing?

A: DEP can be used with only some of your devices.

Q: How do I re-enroll existing devices?

A: Existing devices can be enrolled into DEP by serial number or Apple order number. Go to: deploy.apple.com. However, devices that have been enrolled in DEP and then removed can NOT be re-enrolled into DEP.

Q: What if you have devices that are more than 3 years old? Can you still use the DEP or need to stay with Apple Configurator?

A: You can not use DEP with those devices that are more than 3 years old per Apple’s policy.

Q: Is enrollment available for PC and Android?

A: Device Enrollment Program is an Apple feature; however, Android and PC devices can be enrolled in Mobile Manager.

Q: Does the new enrollment process that prohibits students from removing policies include existing devices?

A: Yes, existing devices can be added to DEP, but those devices must have been purchased directly in the last three years.

Q: Does the new enrollment process that prohibits students from removing policies include existing devices?

A: Yes, existing devices can be enrolled into DEP (that’s the Apple program that prevents users from removing the profile) as long as they were purchased directly from Apple and are less than three years old.

Q: Is there any way to prevent the MDM profile from being removed by a user if not using Apple’s Device Enrollment Program?

A: No. This was one of the biggest challenges for schools before, and is one of the greatest advantages of the DEP for schools now. If you aren’t using or cannot use DEP, Mobile Manager will alert Admins when a profile is removed from a device.