Nine41 Consulting | Configure LANDESK Management Suite 2016.3 for iOS and macOS MDM Management
apple, device management, dep, vpp, systems management, landesk, ivanti, lanrev, absolute, heat, mdm,
1064
post-template-default,single,single-post,postid-1064,single-format-standard,qode-quick-links-1.0,ajax_fade,page_not_loaded,,columns-3,qode-child-theme-ver-1.0.0,qode-theme-ver-11.0,qode-theme-bridge,wpb-js-composer js-comp-ver-5.1.1,vc_responsive
 

Configure LANDESK Management Suite 2016.3 for iOS and macOS MDM Management

Configure LANDESK Management Suite 2016.3 for iOS and macOS MDM Management

LANDESK announced their 2016.3 Management Suite release this week and with it comes a number of enhancements to mobility management, including a number of enhancements to the iOS/macOS platforms for MDM management.  Included in the 2016.3 release is the ability to integrate with Apple’s Device Enrollment Program (DEP) and Apple’s Volume Purchase Program (VPP); including supporting multiple VPP tokens.

Luckily, LANDESK has the documentation already available for this configuration.  For ease, I’m going to aggregate all of the needed information to get up and running with LANDESK MDM in one spot.

Architecture Requirement #1 – Cloud Service Appliance

The LANDESK Mobility Device Management does require a LANDESK Cloud Service Appliance.  This can be either a physical appliance you host in your DMZ or a virtual appliance.  If you do not have a CSA, contact your sales representative.  They’re inexpensive and give you the ability to manage devices off your network.

  1. Configure the LANDESK Cloud Service Appliance as discussed in the how-to articles on the LANDESK community page
  2. Ensure your on build 179 or greater – to do this login to your CSA by browsing to https://csa.fqdn/gsb and hit the System Tab on the left hand side.  Then select the Updates tab from the main page and hit Scan For Updates and apply the latest screen-shot-2016-10-20-at-11-27-05-am
  3. Purchase and apply a valid 3rd party SSL certificate for your CSA; see https://community.landesk.com/docs/DOC-32498

Architecture Requirement #2 – LANDESK Management Suite

  1. Install LANDESK Management Suite 2016.3 – https://community.landesk.com/docs/DOC-42261
  2. Import Apple’s APNS certificate to the Core Server – https://community.landesk.com/docs/DOC-39856

Optional Architecture Configurations

  1. Configure the Core server for DEP (optional) – https://community.landesk.com/docs/DOC-42090
  2. Configure the Core server for VPP (optional) – http://www.nine41consulting.com/import-apples-vpp-token-into-landesk-management-suite/
  3. Configure a DNS TXT entry for easier enrollment (optional) – https://community.landesk.com/docs/DOC-39871
6 Comments
  • How To Enroll into LANDESK Management Suite’s MDM for both iOS and macOS | Apple in the Enterprise
    Posted at 17:48h, 20 October Reply

    […] mentioned in my previous post, LANDESK announced their 2016.3 release for Management Suite and with it comes the ability to […]

  • Matthew Woods
    Posted at 17:20h, 02 November Reply

    Is there anything else needed to get a device registered via DEP? We have everything configured per instruction but the device times out when trying to retrieve the configuration. I know the device has communicated with the server in some way as the “About Configuration” shows the same info we setup on the core profile.

    It just feels like we are missing something in the setup somewhere. We can enroll iOS devices normally and push app/commands so we know that is working.

    • Bennett
      Posted at 19:45h, 02 November Reply

      Matthew, you’re correct, in fact, I haven’t blogged about the DEP aspect of things yet as I’m still working through everything myself.

      However, with that being said, it is very likely that you’re missing a few things. Your CSA must be patched to build 180 and you need to set the DEP service port on the Gateway Service tab to 444. You also need to enable DEP in the firewall section of the Security tab.

      In addition to that, there is a post 2016.3 patch that you’ll need to apply on your core server. Please contact support to get that patch.

  • Matthew Woods
    Posted at 18:52h, 03 November Reply

    Looks like port 444 was only configured for outbound traffic. Fixed that and it’s working now.

  • Nine 41 Consulting - Enterprise Apple Consulting Experts | How To Enroll into LANDESK Management Suite’s MDM for both iOS and macOS
    Posted at 16:39h, 30 January Reply

    […] mentioned in my previous post, LANDESK announced their 2016.3 release for Management Suite and with it comes the ability to […]

  • Nine 41 Consulting - Enterprise Apple Consulting Experts | Assigning DEP Enabled Devices to an Apple MDM Server
    Posted at 17:03h, 30 January Reply

    […] Easy, right?  For the most part, yes it is.  All you need to do is make sure your DEP enabled devices, purchased from Apple or from an authorized DEP reseller, are associated with an Apple MDM server.  In turn, that Apple MDM server needs to be configured with your MDM management service.  To configure LANDESK as your preferred MDM server, see my previous blog post. […]

Post A Comment

ARE YOU READY TO GET STARTED?
Please fill out your information, and a specialist will reach out to discuss our services in more details.
Your Information will never be shared with any third party.
        
Free Training Videos
Register to gain access to all of our free content.
YOUR PHONE
YOUR NAME
YOUR EMAIL
        
Get Started
Provide us your contact information and we will reach out as quickly as possible.
YOUR PHONE
YOUR NAME
YOUR EMAIL
        
Additional Questions?
Provide us your contact information and we will reach out as quickly as possible.
YOUR PHONE
YOUR NAME
YOUR EMAIL
        
Pay by PO?
Provide us your contact information and we will reach out to help you sign up by PO.
YOUR PHONE
YOUR NAME
YOUR EMAIL
Subscribe Now
Subscribing to our site gives you access to our Apple Admin 101 training videos as well as allowing us to notify you of each new blog post we release.
YOUR PHONE
YOUR NAME
YOUR EMAIL
Pay by PO
Send us your contact information and we will reach out to help you sign up by PO.
YOUR PHONE
YOUR NAME
YOUR EMAIL
Additional Questions?
Send us your contact information and your questions and we will reach out as quickly as possible.
YOUR PHONE
YOUR NAME
YOUR EMAIL
YOUR QUESTIONS
Get Started
Provide us your contact information and we will reach out as quickly as possible.
YOUR PHONE
YOUR NAME
YOUR EMAIL
Free Training Videos
Subscribing to our site gives you access to our Apple Admin 101 training videos as well as allowing us to notify you of each new blog post we release.
FIRST NAME
LAST NAME
PHONE
EMAIL
Subscribe Now
Subscribing to our site gives you access to our Apple Admin 101 training videos as well as allowing us to notify you of each new blog post we release.
FIRST NAME
LAST NAME
PHONE
EMAIL