Apple DEP

With the Apple Device Enrollment Program (DEP), you can purchase iPhones, iPads, and Macs in volume for distribution within your company. DEP simplifies the deployment of mobile devices by providing the following features:

  • Configurable activation process.
  • Wireless enabling of supervision mode.
  • Over-the-air configuration.
  • Automatic enrollment of iOS devices with Sophos Mobile during device activation.
Note Sophos Mobile currently supports Apple DEP for iPhones and iPads but not for Macs.
Tip For detailed information on DEP, visit the Apple DEP website at

Preparation steps

To prepare the management of DEP devices with Sophos Mobile, perform the following one-time steps:
  1. In the Apple DEP web portal, create a virtual MDM server and link it to Sophos Mobile. See Set up Apple DEP.
  2. In Sophos Mobile, create one or more DEP profiles that control various device attributes specific to DEP. With the DEP profile, you can also customize the iOS setup assistant that starts when a device is switched on for the first time. See Create DEP profile.

Deployment steps

When you purchase DEP devices, the typical deployment process includes the following steps:
  1. Purchase the devices from Apple or an approved DEP vendor.
  2. In the Apple DEP web portal, assign the devices to the Sophos Mobile MDM server. For this and the next step, see Deploy DEP devices.
  3. In Sophos Mobile Admin, assign a DEP profile to the devices.
  4. Distribute the devices to your users.
  5. When the users switch on their devices for the first time, the customized iOS setup assistant starts. During setup, the devices are enrolled with Sophos Mobile and the user is assigned to the device.
  6. If required, you can transfer additional task bundles to the devices to complete the provisioning.