Mac Deployment Flow

Check the deployment pattern

There are several ways to deploy Macs. The deployment procedure differs depending on your conditions and the management method you want to use. Use the chart or the list to find the deployment pattern that suits you.

Keywords

• Apple Business (formerly Apple Business Manager) An Apple online portal that lets organizations efficiently deploy and manage iPhone, iPad, Mac, and other devices. Administrators can centrally manage bulk device setup (ADE), app distribution (VPP), and user accounts (Managed Apple IDs).
• Per-device authentication A method in which you create device information in advance for each device with an identifier of your choice, and then enroll the device using a Key / Code. Per-device authentication is the only enrollment method for Mac. Shared QR code authentication (automatic identifier generation) is not supported.
• Identifier An ID that identifies a managed device in the BizMobile Go! admin console.

Restrictions on Mac deployment

• Per-device authentication is the only enrollment method. Shared QR code authentication (automatic identifier generation) cannot be used for Mac. Create device information in advance for every device.
• Only App Store apps can be distributed, and only through VPP. In-house apps cannot be distributed.
• VPP apps can be distributed only per device (macOS 11.0 or later). macOS does not support per-user distribution.

*1 Whether the device can be enrolled in ADE

To enroll a device in ADE, ask the reseller where you purchased it, or configure it with Apple Configurator (for Mac).
Also, the device must be erased before it can be used as an ADE device.

*2 Using Apple Business

With ADE, the device is automatically enrolled in the MDM when it is activated, which reduces the device setup (kitting) workload.
With VPP, you can distribute apps to devices.
See What you can do with ADE and What you can do with VPP.

*3 Not using Apple Business

If you do not use Apple Business, you cannot distribute apps.
Management relies mainly on profile settings and remote operations.

Deployment method after you decide the pattern

Using Apple Business

• Use both ADE and VPP (per-device authentication)

  See this page if you use Apple Business with both ADE and VPP.
  Create device information in advance for each device with an identifier of your choice, and link it to the ADE device.

• Use VPP only (per-device authentication)

  See this page if you use Apple Business with VPP only.
  Use this pattern to manage devices that cannot be enrolled in ADE (such as Macs already in use).

Not using Apple Business

• Use neither ADE nor VPP (per-device authentication)

  See this page if you do not use Apple Business.
  Apps cannot be distributed, and management relies mainly on profile settings.