# Apple Enrollment

> Enroll iPhone, iPad, and Mac devices in CapaOne through Apple MDM using enrollment configurations.

Source: https://docs.capaone.com/capaone/enrollment/apple-enrollment/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

Apple devices (iPhone, iPad, Mac) are enrolled through Apple MDM.

:::note[Before you start]
Apple enrollment requires a one-time
[Apple Push Certificate Setup](/capaone/mobile-manager/apple-mdm/apple-push-certificate-setup/)
before any device can enroll.
:::

## Enrollment configurations

An enrollment configuration defines the management mode and what groups, apps, and settings a
device receives once enrolled. Go to **Apple → Enrollment → New** to create one.

- **Unsupervised (BYOD)** — for personally owned devices. The user installs an enrollment profile
  manually; personal apps and data stay private.
- **Supervised (corporate)** — for company-owned devices enrolled through Apple Business Manager
  (DEP). The device is fully managed from first boot, with no manual steps.

### Create a BYOD configuration

1. Go to **Apple → Enrollment → New**.
2. Give it a name and description.
3. Add groups, configurations, and applications to apply after enrollment.
4. Save.

![New unsupervised (BYOD) enrollment configuration form](/attachments/capaone/apple-byod-enrollment-configuration-form.png)

### Create a supervised (corporate) configuration

1. Go to **Apple → Enrollment → New**.
2. Give it a name and description.
3. Add groups, configurations, and applications for supervised enrollment.
4. Under **DEP Enrollment Profile**, select an authentication method. Without Entra ID integration, choose **No user authentication**.
5. Enable **Skip items** and select all — this improves the first-boot experience.
6. Click the action menu (⋯) and select **Set as default DEP**.

![Supervised enrollment configuration set as default DEP profile](/attachments/capaone/apple-supervised-enrollment-configuration-default-dep.png)

## Enroll devices

Open a configuration with **View** to access its enrollment materials.

![Apple enrollment configurations list](/attachments/capaone/apple-enrollment-overview.png)

![Apple enrollment methods — QR code, Download, and DEP tabs](/attachments/capaone/apple-enrollment-methods.png)

### BYOD devices

1. Open a browser on the device, or scan the QR code from the configuration using the camera.
2. Download the enrollment profile and install it:
   - iOS/iPadOS: **Settings → General → VPN & Device Management**
   - macOS: double-click the profile, then approve it under **System Settings → Privacy & Security → Profiles**

The device appears under **Apple → Endpoints**.

![Enrolled BYOD device appearing in CapaOne](/attachments/capaone/apple-byod-device-enrolled.png)

### Supervised devices (DEP)

Requires the [Apple DEP Integration](/capaone/mobile-manager/apple-mdm/apple-dep-integration/).

1. Assign the device in Apple Business Manager to the CapaOne MDM server.
2. Reset or unbox the device.
3. The device auto-enrolls during initial setup. If Entra ID integration is enabled, the user signs in with their credentials.

The device is supervised and managed without manual steps.

![Supervised DEP device enrolled and managed in CapaOne](/attachments/capaone/apple-dep-supervised-device-enrolled.png)