DEP profile settings (iOS)

General settings




The name of the DEP profile.


An optional description of the DEP profile.

Device group

A device group that will be assigned to devices when they are enrolled with Sophos Mobile.

For information on device groups, see Device groups.

To simplify device management, we recommend that you use a separate device group for DEP devices.

Task bundle

A task bundle that will be transferred onto the devices when they are enrolled with Sophos Mobile.

The list includes all task bundles that contain no enrollment task.

For information on task bundles, see Task bundles.




User can remove MDM policy

The user is able to remove the Sophos Mobile enrollment profile through the user interface.

This option can only be deselected for supervised devices.

Install SMC app

Install the Sophos Mobile Control app onto the device.

If you enable this option, you must also disable the Apple ID option on the iOS setup tab to make sure that Sophos Mobile can install the app from the App Store.

Alternatively, if you are enrolled in the Apple Volume Purchase Program (VPP), the Sophos Mobile app can be installed as a VPP app, even if the device is not associated with an Apple ID. Devices must be in status “managed”. See Automatically assign VPP apps.

User can skip MDM policy assignment

The user is able to skip the setup step that applies the Sophos Mobile enrollment profile.

Assign user to device

During the enrollment process with Sophos Mobile, users are asked for their Self Service Portal credentials and then assigned to the device.

Use this option to auto-assign a user to the device.

iOS setup

On the iOS setup tab, you disable configuration steps of the setup assistant that starts when the device is switched on for the first time.

Note These settings only affect the setup assistant. If you disable a configuration step, the user is still able to enable the relevant option later. To completely disable a feature, use a Restrictions configuration. See Restrictions configuration (iOS device policy).



Apple ID

Skip configuring an Apple ID. The user cannot log in with their Apple ID to access Apple services.

Apple Pay

Skip configuring Apple Pay. The user cannot add credit or debit card information for paying in stores or within apps using Apple Pay.

Location services

Skip configuring location services. Location services are turned off.

Terms and Conditions

Skip the Terms and Conditions page.

Keyboard layout

Skip configuring the keyboard layout.


Skip the page that explains the Data & Privacy icon.

New features

Skip the pages that explain new iOS features.

Restore from backup

Skip restoring data from an iCloud or iTunes backup, or transferring data from an Android device.

Disable “Move Data from Android”

The option to transfer data from an Android device is not available.


Skip creating a passcode to unlock the device.

Display Zoom

Skip configuring Display Zoom, that is a zoomed view providing larger icons, text and buttons.

Home button feedback

For iPhone 7 and later, skip configuring the Home button feedback, i.e. the level of tactile feedback when clicking the virtual Home button.

Cellular plan

Skip configuring a cellular data plan.

Screen Time

Skip configuring Screen Time (the reporting and limiting of time spent on the device).


Skip configuring diagnostics. Diagnostic and usage data are not sent to Apple.

Touch ID & Face ID

Skip configuring Touch ID and Face ID. The user cannot set up biometric authentication in place of a passcode.


Skip configuring Siri. Siri is turned off.

Watch migration

Skip restoring Apple Watch data from an iCloud or iTunes backup.

True Tone

Skip activating True Tone (the automatic adaptation of display colors based on ambient lighting conditions).

iMessage and FaceTime

Skip activating iMessage and FaceTime.

iOS update information

Skip the page that informs users that iOS updates are installed automatically.

Support information




The department or location name associated with the profile.

This name is included in the information that the user can access by clicking About Configuration during device setup.

Phone number

The support phone number for your company.

This field is pre-populated with the phone number from the technical support contact details. See Configure IT contact.

The phone number is stored internally in the DEP profile but is not available to the device user.


The support email address for your company.

This field is pre-populated with the email address from the technical support contact details. See Configure IT contact.

The email address is stored internally in the DEP profile but is not available to the device user.

USB pairing

On the USB pairing tab, you can restrict the USB pairing of iOS DEP devices to selected Macs. USB pairing is required to connect the device to iTunes or Apple Configurator.



Allow USB pairing with all hosts

If you select the check box, you can pair the device with any computer.

If you clear the check box, you can only pair the device with Macs you’ve configured for device supervision. You can’t pair the device with Windows computers.

Upload host certificate

Upload a supervision identity certificate.

All Macs containing the certificate in their keychain can supervise the device.

You can upload several certificates.

Note If you clear Allow USB pairing with all hosts and don’t upload a certificate, you can’t connect the device to iTunes or Apple Configurator.