Question 1

Notes to Users Who Are Currently Using other MDM Service

superadmin · Accepted Answer

ESP always welcome users with different background and brings us feedback on how we can do better. Therefore, we are open for trial and comparison. If you want to use ESP in parallel with other MDM service which you are currently using, or even transfer the MDM service to ESP from another. Please check the following items:

On your iPads, remove MDM Certificate
On your iPads, go to Settings > General > Transfer or Reset iPad > Erase All Content and Settings
Register ESP as Your MDM Server
Set up DEP
Set up VPP
Set up APNS
Set up Wi-Fi and Blueprint
Reset and Activate ESP on devices (iPad)

Question 2

ESP Full Setup for iOS Overview

superadmin · Accepted Answer

For normal setup with DEP, you will need to go through Steps 1 to 7 ( 1 > 2 > 3 > 4 > 5 > 6 > 7 )
If you do not have DEP, you will have to skip Steps 2 and 3 and take Step 6.5 ( 1 > 4 > 5 > 6.5 > 7 )
Please consult your Apple Authorized Reseller for setting up your Apple School Manager (ASM), DEP or VPP

ESP Full Setup for iOS

Question 3

1. Preparation (for iOS First Time Users)

superadmin · Accepted Answer

Please get the following information ready prior to the actual deployment of your devices:

Create ESP Account - please take less than 1 minute to register http://www.eschoolpad.com/enroll/
Apple School Manager Account
- The PO number or iPad SN csv list from your Apple authorized reseller
- Notify your Apple authorized reseller your 6 digits DEP customer ID and tell them you are going to use eSchoolPad
- School owned Apple ID for APNS certificate creation
- Apple DEP and VPP account and password with registered mobile phone in place if applicable
  - If you choose for non-DEP setup, you will need to install the latest Apple Configurator on a Mac with the latest MacOS installed.
Minimum OS: iOS 9.3 or above (Ready to be wipe again)
PC/Mac browser with internet connectivity
School Wi-Fi SSID and password
Apps to be deployed onto the devices, including both VPP or non-VPP apps.
Devices naming arrangement (e.g. iPad0001, iPad0002,...)
App grouping (eg. subjects) and device grouping (eg. classes) for later App Labelling and Device Labelling
Restriction (e.g. disable app store, camera etc…) for every iPads
Prepare a csv file with iPad Serial Numbers, iPad name and grouping
Define home screen layout (eg. app folders) arrangement
For non-DEP setup, you need:
- Latest Apple Configurator on a Mac with the latest MacOS installed
- USB cable for connecting iPads to Mac
- School owned Apple ID for each iPads
- iPad 2 or above
- On iPads, Settings > iCloud > Turn OFF "Find My iPad"

Something more you may need to consider:

- Wi-Fi Network: If you have a lot of devices to set up, we recommend you set up a Wi-Fi network with no password authentication for giving each iPad Wi-Fi and Internet connection quickly.
- Caching: If you have a lot of apps to install, we recommend you install OSX Server and enable Cache server service.

All set? If yes, you can now proceed to register MDM Server

- Most importantly, do not open your iPads/MAC until you are told to do so
- Please follow the instructions accordingly until you read COMPLETE!!!! in the last stage
- Please go to "Step 2 - Register ESP as Your MDM Server"
- For non-DEP setup, please go directly to "Step 4 - Setup VPP"

Question 4

2. Register ESP as Your MDM Server

superadmin · Accepted Answer

First, you will need to tell Apple, ESP MDM is your MDM Server. Please proceed the following step by step:

**For non-DEP, please skip this and go to "Step 4 - Setup VPP" directly

Download ESP Public Key here
- Hong Kong: DOWNLOAD
- Taiwan: DOWNLOAD
Register ESP as your MDM Server in ASM
1. Login to http://school.apple.com
2. Select Click on Login User’s name and select “Preference”
3. Tab + in Your MDM Servers
4. Type ESP MDM as the Name of the Server
5. Upload ESP Public Key (Downloaded in Step 1 above) in Upload file
6. Tap Save
7. (on the top of the MDM server） please tap Download Token *This is essential for later setup
8. The MDM Server is setup successfully
Done!!! You can now proceed to "Step 3 - Setup DEP"

Question 5

3. Setup DEP

superadmin · Accepted Answer

After registering ESP MDM as your MDM Server, you will need to setup your DEP in ESP Admin Console.

**For non-DEP, please skip this and go to "Step 4 - Setup VPP" directly.

Please proceed the following step by step:

Setup in ESP Admin Console
Assign Devices in ASM
1. Select Devices
2. Choose devices by:
  1. Assign the devices you want to manage in MDM server, by entering the device’s ⦿ Serial Number / ⦿ Order Number / ⦿ CSV File
3. Choose Edit MDM Server: Select ESP MDM
4. Tap OK to confirm
Done!!! You can now proceed to "Step 4 - Setup VPP"

Question 6

4. Setup VPP

superadmin · Accepted Answer

After the DEP is ready or you are non-DEP, you need to set up VPP for your APPs.

Download VPP Token from ASM
1. Login to Apple School Manager ( https://school.apple.com )
2. Click on Login User’s name and select [Preference] > Select Payment and billing > (select App)
3. Find [Server Tokens] > Click [Download] > Token will download to your computer
Setup VPP
1. Login to ESP Admin Console ( https://www.eschoolpad.net/admin )
2. Go to Apple > VPP > VPP Setup
3. In Upload Token field, upload the VPP Token you have downloaded in Step 1 above
4. Tap Submit button
5. VPP account has been setup successfully
Update Apps
1. Scroll up and tap Update VPP Apps button.
2. WAIT until the VPP Sync process is completed.
Done!!! You can now proceed to "Step 5 - Setup APNS"

Question 7

5. Setup Apple Push Notification Service (APNS)

superadmin · Accepted Answer

Apple Push Notification Service certificate is essential to push notification to the MDM devices.

Please follow step by step to proceed:

Download the Certificate Signing Request (CSR) file from ESP DOWNLOAD NOW - avrio_mdm.csr
Apple Push Certificates Portal
1. Login to ( https://identity.apple.com/pushcert ) with your Apple ID
2. Click Create a Certificate
3. Accept the Terms of Use
4. Leave Notes empty
5. Choose File upload the Certificate Signing Request (CSR) – "avrio_mdm.csr" you have already downloaded
6. Click Upload
7. Now you have successfully created a new Apple Push Certificate
8. Click Download the certificate – MDM_Arche Solutions Company Limited_Certificate.pem
Update Certificate at ESP Admin Console
1. Login to ESP Admin Console
2. Go to Apple
3. Provide Apple ID
4. Upload Push Certificate by selecting the certificate you have just downloaded in Step 2 above
5. Tap Save button to proceed
6. Check and make sure the "Apple ID" and "Valid Date" are correct
Done!!! You are now closed to the final setup. Please go to "Step 6 - Setup Wi-Fi and Blueprint"

Question 8

6a. Setup Wi-Fi and Blueprint

superadmin · Accepted Answer

Create Wi-Fi Profile
1. Login to ESP Admin Console ( https://https://www.eschoolpad.net/admin/v5/login.php)
2. Go to Profile
3. Tap + Create New
4. Type School Wi-Fi in Profile Name field
5. Tap + New Configuration
6. Select Wi-Fi from the dropdown
7. Provide SSID and Password
8. Tap Save
Setup Blueprint
1. Go to Settings > Blueprint
2. There is a default blueprint in the list, naming Device Enrolment Blueprint
3. Make sure the Status is ON
4. To edit the setting, tab ⋯ Action button in the far left column.
5. Tap Edit
6. The default settings including:
  1. Install All Apps ( Free Apps in ESP Library )
  2. Set Homescreen Layout ( ESP Default )
  3. Set Wallpaper ( Lock Screen, Home Screen & Show Device Name )
  4. Profiles ( Default ON )
  5. Disable App Install/AppStore/Remove
  6. Disable Game Center
  7. Disable Facetime
  8. Disallow Change Device Name
  9. Disable Enterprise Apps
  10. Disable iMessage
  11. Disable Apple Music
7. In Profile, scroll down and find your School Wi-Fi created in Step 1 above.
8. Check ☑︎ School Wi-Fi and make sure status is Install
9. Tap Save at the bottom to confirm the settings
DONE!!! You are almost there. Now you can touch your devices. Please go to "Step 7 - Activate Device"

**For non-DEP, please go directly to "Step 6b - Supervision"

Question 9

6b. Supervision (for non-DEP only)

superadmin · Accepted Answer

For non-DEP users, you must go through this "Step 6b - Supervision" before moving forward

Please follow step by step:

Find Enrolment URL in ESP Admin Console
Setup an MDM Server
1. Open Apple Configurator 2 on your Mac Machine
2. Choose the devices > Click Prepare
3. Choose configuration by Manual > Click Next
4. Choose Add New Server > Click Next
5. Enter the Name ESP MDM and Enrolment URL your have noted in Step 1d above
6. Select eschoolpad.net as anchor certificate > Click Next
Supervise Devices
1. Check Supervise Devices
2. Check Allow devices to pair with other computers
3. Click Next
Organizaton Info
1. Enter School Name and other informations
2. Press Next to confirm
3. Choose ⦿ Generate a new supervision identity > Click Next
Configure iOS Setup Assistant
1. Choose the steps will be presented to the user in Setup Assistant
2. Click Prepare to finish all the prepare iOS Device process
3. This step may take a while, please wait for the process to finish
Done!!! You can now proceed to "Step 7 - Devices activation"

Question 10

7. Reset and Activate ESP on Devices (iPad)

superadmin · Accepted Answer

You are doing very well up this point. Now you can touch your devices to finalize the setup

Take out all the devices you have registered in DEP
Make sure the devices are connected to the Internet
If the devices are brand new, once the devices are connected to the Internet, the deployment starts automatically
If the devices have been initiated and you are on the homescreen, tap Settings > General > Transfer or Reset iPad > Erase All Content and Settings. Tap Continue then Erase iPad
WAIT until the deployment completes. Please note that it may take some time, the process will take longer if you have a lot of devices to be deployed and apps to be pushed onto the devices. Certainly, the bandwidth of your internet connectivity is a major factor as well
Verification: you can go to ESP Admin Console to check if the devices have been added into your Device Management list. Go to Device > Device Management
On your devices, tap ESP icon
If prompt for Location Services, please choose Always Allow
If prompt for Notification, please choose Always Allow
COMPLETE!!!

Profile Status	Meaning
empty	no profile has been assigned yet
assigned	device has been assigned DEP profile but not yet configured
pushed	device has been DEP configured

Support – Admin Console (iOS)

ESP 2.0 Setup

Full Setup (iOS - Admin)