How to Enroll iOS Supervised and Non-Supervised Devices into WeGuard

How to Enroll iOS Supervised and Non-Supervised Devices into WeGuard

WeGuard ensures that admins get a hassle-free experience with iOS Device Enrollments through ABM devices sync enrolling the Supervised and Non-Supervised (BYOD)

Supervised devices: A Supervised iOS device is an iPhone or iPad that is placed under a higher level of control and management by an organization, such as a business or school, through MDM. Supervision provides administrators with enhanced capabilities to enforce stricter security policies, configure settings remotely, restrict features (like app installations, iCloud, or AirDrop), and silently push apps or updates. Supervision can only be enabled during the initial setup or after a factory reset, and it is typically used for corporate or institution-owned devices.

Un-Supervised Devices (BYOD): An Un-Supervised iOS device is an iPhone or iPad that is either personally owned or has not been placed under the strict management of an organization through MDM. These devices have fewer restrictions and offer more user control, allowing the device owner to install and remove apps, access personal data (like iCloud), and make changes to settings. While basic management can still be applied, unsupervised devices do not allow advanced control features like remote restrictions, silent app installation, or enhanced security policies, which are available with supervised devices.


Prerequisites

  • APNS, DEP, and Apps & Books certificates should be uploaded and the WeGuard server has to be assigned to all devices in the ABM account

  • Initiate a device sync in the WeGuard console before starting enrollment. The devices will then appear under the Default iPad iPhone Supervised Policy in an un-provisioned state.

    • Click here for the steps to upload iOS certificates. (APNS, DEP, and Apps & Books)

  • iPhones/iPads must be running iOS/iPad OS 16.0 and above.

  • For devices to be enrolled in Supervised mode, they must be in setup mode out of the box. If the device is already in use, it must be fully erased from the settings.


Procedure to Assign WeGuard Server to devices via ABM

  • Login to ABM
  • Go to Devices
  • Select the Device/or all the Devices and click on the three dots on the extreme right.
  • Select Edit MDM Server
  • Click on Assign to the following MDM Server.
  • Select WeGuard Server and Click Assign

InfoClick here to know how to create a WeGuard MDM server in ABM

Procedure to enroll iOS Supervised devices into WeGuard


For devices to be enrolled in Supervised mode, they must be in setup mode out of the box. If the device is already in use, it must be fully erased from the settings.
  • Choose your preferred language.
  • Select the appropriate country or region.
  • Choose your preference for Text and Icon Appearance and click "Continue".
  • Select "Set up without another device" to proceed without pairing.
  • Select the Written and Spoken Language, then click "Continue."
  • Connect the device with a stable Wi-Fi network or if the device has Mobile Data continue with that.
  • “Remote Management” Screen will pop up asking to enroll the device option. Click "Enroll this iPad or iPhone".




  • Select "Continue" for automatic updates or choose "Only download automatically" if preferred.

  • Enable Location services so that WeGuard can work smoothly with the Location Tracking Feature.

  • Click "Get Started".

Info

The Supervised iOS device is successfully enrolled into WeGuard.


Procedure to enroll iOS Non-Supervised devices running on OS version below 18


  • Open the Camera on iPhone/iPad

  • Scan the QR available in the WeGuard Console beside the Policy Group Name under the Actions.




  • Open the URL in Safari Browser only.




  • Click on Download Profile and download it.




  • Go to settings, You should now see a "Profile Downloaded" option at the top of the screen. 




  • Tap "Profile Downloaded" and click on the Install.




  • Once the profile is installed, the WeGuard app will automatically be installed on your device.




Info

The BYOD (Un-Supervised) iOS device is successfully enrolled into WeGuard.



Procedure to enroll iOS Non-Supervised devices running on iOS version 18 and above


  • Open the Camera app on iPhone/iPad

  • Scan the iOS Non-DEP policy QR using the iPhone's camera (running iOS 18).




  •  A popup will appear, prompting you to download 'Enroll.mobileconfig'. 

  • Tap to download the file. Open the Files app on your iPhone. 

  • Tap on the downloaded 'Enroll.mobileconfig' file. This will initiate the profile download process.

  • Open the Settings app. You should now see a "Profile Downloaded" option at the top of the screen. 



  • Tap "Profile Downloaded" and follow the on-screen instructions to install the profile. 




  • Once the profile is installed, the WeGuard app will automatically be installed on your device.




Info

The BYOD (Un-supervised) iOS device is successfully enrolled into WeGuard.





We hope this article was useful. Thank you for reading.

For more WeGuard insights, please explore the Visual Knowledge-base Series

For more details, please visit https://www.weguard.com

If you need any help on this, do call WeGuard Support at +1(737) 931-1410 Ext. 102 or contact WeGuard Support Email or Initiate Chat


    • Related Articles

    • iOS Device Removal and Unenrollment Guide

      IT admins need to delete devices from the organization that are no longer in use or no longer supported. To streamline this process, WeGuard provides the option to remove the MDM with or without resetting the device. This document explains how to: ...

    • Configure iOS Enrollment Setup Skip Options

      The MDM enrollment setup skip options allow administrators to customize and streamline the device setup experience by bypassing unnecessary screens, reducing user interaction, and ensuring compliance with organizational policies. These settings are ...

    • iOS Enrollment - How to perform DEP setup.

      Hello and Welcome to WeGuard Enterprise Visual Knowledge-base Series. In this KB article, We will explain how to perform DEP setup which is a part of iOS enrollment. This step is usually performed after the APNS Setup. Login to WeGuard Console with ...

    • Password policy for iOS devices

      Password enables the users to protect the device from unauthorised access and hence assure device and data security. WeGuard allows the admin to configure password rules to be maintained by the end-users. These rules define the password complexity ...

    • How to upload iOS certificates during Enrolment?

      In order to establish the communication between the iOS devices and WeGuard, also to enroll the supervised devices from ABM we need to upload a few iOS Certificates. 1. APNS Certificate : Apple Push Notification Service (APNS) certificate is used in ...