DEP profile settings (iOS)

General settings

Setting/Field

Description

Name The name of the DEP profile.
Description An optional description of the DEP profile.

Device group

A device group that will be assigned to devices when they are enrolled with Sophos Mobile.

For information on device groups, see Device groups.

Note To simplify device management, we recommend that you use a separate device group for DEP devices.

Task bundle

A task bundle that will be transferred onto the devices when they are enrolled with Sophos Mobile.

The list includes all iOS task bundles that contain no enrollment task.

For information on task bundles, see Task bundles.

Enrollment

Setting/Field

Description

Supervise device Supervision mode is enabled.
User can remove MDM profile The user is able to remove the Sophos Mobile enrollment profile through the iOS user interface.

This option can only be deselected for supervised devices.

Install SMC app Install the Sophos Mobile Control app onto the device.

If you enable this option, you must also disable the Apple ID option on the iOS setup tab to make sure that Sophos Mobile can install the app from the App Store.

Note Alternatively, if you are enrolled in the Apple Volume Purchase Program (VPP), the Sophos Mobile app can be installed as a VPP app, even if the device is not associated with an Apple ID. Devices must be in status managed. See Automatically assign iOS VPP apps.
User can skip MDM profile assignment The user is able to skip the setup step that applies the Sophos Mobile enrollment profile.
Assign user to device During the enrollment process with Sophos Mobile, users are asked for their Self Service Portal credentials and then assigned to the device.

Use this option to auto-assign a user to the device.

iOS setup

On this tab, you can disable configuration steps of the setup assistant that starts when the device is switched on for the first time.

Note These settings only affect the iOS setup. If you disable a configuration step, the user is still able to enable the relevant option later. To completely disable a feature, use a Restrictions configuration. See Restrictions configuration (iOS device profile).

Setting/Field

Description

Restore from backup Skip restoring data from an iCloud or iTunes backup, or transferring data from an Android device.
Disable “Move Data from Android” The option to transfer data from an Android device is not available.
Diagnostics Skip configuring diagnostics. Diagnostic and usage data are not sent to Apple.
Location services Skip configuring location services. Location services are turned off.
Siri Skip configuring Siri. Siri is turned off.
Display Zoom Skip configuring Display Zoom, i.e. a zoomed view providing larger icons, text and buttons.
Keyboard layout Skip configuring the keyboard layout.
Apple ID Skip configuring an Apple ID. The user cannot log in with their Apple ID to access Apple services.
Apple Pay Skip configuring Apple Pay. The user cannot add credit or debit card information for paying in stores or within apps using Apple Pay.
Touch ID Skip configuring Touch ID. The user cannot set up a fingerprint in place of a passcode.
Passcode Skip creating a passcode to unlock the device.
Terms and Conditions Skip displaying the Terms and Conditions page.
Watch migration Skip restoring Apple Watch data from an iCloud or iTunes backup.
Home button feedback For iPhone 7 and later, skip configuring the Home button feedback, i.e. the level of tactile feedback when clicking the virtual Home button.

Support information

Setting/Field

Description

Department The department or location name associated with the profile.

This name is included in the information that the user can access by clicking About Configuration during device setup.

Phone number The support phone number for your company.

This field is pre-populated with the phone number from the technical support contact details. See Configure support contact.

Note The phone number is stored internally in the DEP profile but is not available to the device user.
Email The support email address for your company.

This field is pre-populated with the email address from the technical support contact details. See Configure support contact.

Note The email address is stored internally in the DEP profile but is not available to the device user.

USB pairing

On the USB pairing tab, you configure host computers to which the device is allowed to connect with, using USB ports. This can be used to sync the device with iTunes or to manage it with Apple Configurator.

Setting/Field

Description

Allow USB pairing with all hosts To forbid USB connection or to restrict it to certain hosts, deselect this check box and then upload a certificate file for each host to which the device is allowed to connect with.