Apple management

• Mac Mini has IP address 10.1.0.120. Can use TightVNC to access. Domain admin password for VNC and local admin account
• https://school.apple.com/ Browser on Mac Mini should be trusted. Apple ID is apple@fairsteadhouse.co.uk, 2FA will text code to Michael's phone
• Mainly just need to agree to new T&Cs in a timely fashion

ManageEngine MDM

• Has own VM
• Web console is http://localhost:9383/ DOES NOT WORK IN IE
• User ID is admin, password is domain admin password
• If Apple Business Manager (ABM)/Apple School Manager (ASM) and sToken are about to expire, it will tell you
• To renew sToken (for apps):
  1. Log onto Apple School Manager
  2. Click on Account Name and then pick Preferences
  3. Go to Payments and Billing
  4. Scroll to bottom and look for Server Tokens, click to download
  5. Back in ManageEngine, click on Device Management, then App Repository
  6. Click on Apple App Management, then Modify
  7. Click on pencil next to Upload Server Token and browse to downloaded token
  8. Leave Without Apple ID ticked and click Upload Token button
  9. Check Expiry date has been updated
• To renew ASM token:
  1. Click on Enrollment tab
  2. Click on Apple Enrollment (ABM/ASM) in side panel
  3. Click on Servers sub-tab
  4. CLick on Replace Token in Action submenu against the server
  5. Click on Download to download the .pem certificate
  6. Log onto Apple School Manager
  7. Click on Account Name and then pick Preferences
  8. Look in Your MDM Servers section, click on ManageEngine MDM
  9. Click on Edit, then Upload New... in MDM Server Settings
  10. Browse to the .pem file previously downloaded
  11. Click Save
  12. Click on Download Token
  13. Back in ManageEngine, the Server Token window should still be open. Browse to upload the token just downloaded
  14. Check expiry date has updated

ManageEngine update

1. Snapshot the VM
2. Stop ManageEngine service in Services or use Stop Mobile Device Manager Plus from Start Menu
3. Log onto console and check Build Version
4. Download relevant new version from https://manageengine.com/mobile-device-management/service-packs.html by comparing the current build version
5. From Start Menu, run Update Manager from ManageEngine folder
6. Browse to the downloaded file (slightly funky Java UI)
7. Click Install and wait (for quite a long time)
8. The window will show a Close button when completed
9. Restart the ManageEngine service in Services or use Start Mobile Device Manager Plus from Start Menu
10. Service is slow to initialise, wait for notification that is running before trying to access its console