Devices can be enrolled into Systems Manager in several different ways. Explore the different options available for on-boarding new devices and features associated with device enrollment.
The Meraki management profile must be present on all devices enrolled in a Systems Manager network. Although this profile cannot be protected by a password to prevent removal, several plans can be implemented to discourage removal:
Meraki Systems Manager provides administrators the ability to mass enroll and supervise devices using Apple Configurator, a Mac application. Apple Configurator 2 allows for mass configuration of iOS 9+ devices while physically connected to a Mac computer.
If a device has been enrolled via Apple's Device Enrollment Program, and is then removed from the clients list in Dashboard, it may not reappear automatically. The following steps outline how to recover a DEP client in Dashboard
In order for Cisco Meraki Systems Manager to communicate with an enrolled iOS device, Apple's Push Notification Service (APNS) first sends the device a silent notification. This notification prompts the device to check-in with the Meraki Dashboard, and receive any pending commands. In order for Apple's Push Notification server to recognize commands from Systems Manager, a certificate must be installed on enrolled iOS devices.
If you have renewed your Apple Push Notification Service certificate and dashboard is reporting that your devices are out of compliance, this means that something went wrong with the renewal process and another certificate was generated rather than an actual renewal. This article walks through recovering the APNS communications chain and reestablishing contact with these devices through APNS.
To un-enroll a managed device from Systems Manager, the SM agent needs to be uninstalled from the device itself as well as from Dashboard. This article will detail how to remove the SM agent from each type of device, as well as from the Dashboard.
