Apple Deployment and Management Certification Training 2027

This lecture introduces students the the concept of Mobile Device Management (MDM).

In this lecture students learn how a MDM server communicates with managed clients.  How the clients get enrolled in management and how Apple Push Notifications are used in the management process.

This lecture introduces students to the concept of Declarative Device Management, a new form of the MDM protocol.

In this lecture students learn all about the built-in features of every Apple operating system that enables MDM based management.

This lecture provides students with information on ownership models and which models are used with what kind of device enrollment process.  User enrollment vs Device enrollment is explored.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson, we take a deep dive into all of the things to consider when selecting a Mobile Device Management solution.

In this lesson we begin walking through the network-related decisions and considerations when planning a large deployment of Apple devices.

This lecture continues to explore network configurations as it relates to ultra-secure enterprise networks.

This lecture hits the high points when planning to support a large number of Apple devices via wireless networks.

Support for Apple services like Bojour, AirPlay and the network configurations to support Apple Push Notifications are discussed in this lecture.

In this lesson, students will learn how to use the Mac Evaluation Utility to assess how ready their corporate network is to support Apple devices.

In this lesson we introduce students to various authentication technologies such as Kerberos and Platform SSO.

In this lesson students learn about device security and options for protecting organization data and apps on managed devices.

This lesson discusses various MDM based security features for device restrictions, including enforcing some security policies on personally owned devices.

This lesson is a basic overview of how digital certificates are structured and how they work.

In this assignment students will use what they have learned in this section to set their device management goals and evaluate infrastructure needs.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson students are introduced to Apple School Manager and Apple Business.  What features are provided and how to sign up for one of these two services is also explored.

This lesson demonstrates the overall interface and organizational settings for Apple Business as an example. Apple School Manager options are discussed as they are similar in almost every respect.

In this lesson students learn how to configure a connection between Apple Business and their MDM using Mosyle as an example.

In this lesson students learn how to add additional locations to their Apple Business instance.  This could include different buildings, campuses, or office locations.

This lesson demonstrates how to add additional user accounts to Apple Business.  Enabling options like Sign in with Apple, creation of the Managed Apple Accounts, and assigning Roles are also covered.

In this lesson students learn how to add both an iOS device and a Mac with Apple Silicon that were not purchased directly from Apple by the organization to the Apple Business device inventory.

In this lecture students will learn about the how to register, capture, and federate their organization's domain in Apple Business.

In this demonstration students step through the process of verifying their domain, configuring federation on that domain, and how to generate federated Managed Apple Accounts.

In this lesson students learn how to configure which services can be used with Sign-In with Apple using a Managed Apple Account

In this lesson students learn about service restrictions that can be enabled in Apple Business that govern how Managed Apple Accounts can be used with Apple's online services.

In this lesson we showcase some of the new device management features recently added to Apple Business including disabling Activation Lock.

This lesson briefly introduces the Apple Business / School Manager API for pulling raw data about your devices and users in AxM.

Applying what you have learned, configure your Apple Business / Apple School Manager for your organization.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson students will learn all about how to purchase Apps and Books through Apple Business and then make that content available for assignment through their MDM.

This lesson explores content tokens and how to use a device management service to configure Apps & Books.

In this lecture students are introduced to the Content Caching service available on every Mac.  The multiple benefits of this feature are examined and discussed.

This lesson demonstrates how to configure a Mac for content caching.  Standard and Advanced options are explored.

In this lesson students are shown how to maintain their Content Caching server(s) via Activity Monitor as well as using command-line utilities.

In this assignment, students are asked to setup a Mac on a network to use as a content caching server for a period of time.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson students learn about how to assign devices to an MDM and how to configure automatic device assignments.

This lesson introduces students to Apple Configurator for iPhone and Apple Configurator for Mac.  The use cases for each and the general setup and user interfaces are explored.

In this lesson students are introduced to Blueprints in Apple Configurator for Mac.  We build and deploy a custom Blueprint to a test iPad.

In this lecture, students are introduced to configuration profiles and strategies for deploying these at scale.

Students are given a deep dive into creating configuration profiles.  Best practices for profile installation is discussed and in the practical application section of this lesson, students are shown how to create a configuration profile with a passcode payload that gets added to our Blueprint.

This lesson introduces students to the iMazing Profile Editor, a free tool for creating configuration profiles and a potential substitute for testing configuration profiles without having to own a device management service.

In this lecture, students are introduced to the concept of Declarations and how they differ from traditional configuration payloads when it comes to managing devices.

In this lesson students will learn how to configure Setup Assistant to skip various steps to streamline the new device onboarding process.

This demonstration introduces learners to the Managed Migration Assistant feature where device management administrators can configure migration options on behalf of users.

In this lesson students get a demonstration of how to setup Automated Device Enrollment in Mosyle's MDM solution for iOS.

In this lesson students get a demonstration of how to setup Automated Device Enrollment in Mosyle's MDM for macOS.

In this lesson we explore creating local user accounts as part of configuring Managing Setup Assistant.

This lecture discusses the difference between personalization and pre-configuration when it comes to selecting and enforcing device settings in an MDM.

In this assignment, students will utilize Apple Configurator to design a Blueprint that applies custom configuration profiles to one or more test devices.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson we discuss the topic of Device Enrollment and why you would need to use this for organization-owned devices over Automated Device Enrollment.

This lesson demonstrates to students how to use an MDM to create and export a *.mobileconfig profile that can be used for Device Enrollment.

This lesson explains how to use the command-line in macOS to manage MDM profiles, particularly for enrolling devices in management via a script.

In this lesson students will initiate the process of migrating from one MDM/DMS to another in a self-service manner.

This lecture is a deep-dive into User Enrollment.  Topics including limitations to device management and enrollment methods are explored.

In this demonstration students will see the end-user experience of both available methods for User Enrollment.

In this lesson students will learn how to configure Account Driven User Enrollment using Federated Managed Apple Accounts.

This lecture provides an overview of the features and system requirements to implement Shared iPad.

In this demonstration, students will see how to configure Shared iPad and how it differs from a standard iPad experience.

In this lesson we’ll briefly discuss Automated Device Enrollment for niche platforms like watchOS, tvOS, and visionOS.

In this short lecture, students are challenged to think proactively on how best to support their end-users when deploying managed devices in their organization.

If the student has access to an MDM, they will onboard a test BYOD (bring your own device) iPhone, iPad, or Mac via User Enrollment.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lesson students learn how to create a Wi-Fi configuration profile for WPA2/3 connections.

This lecture is a deep-dive for configuring Wi-Fi and certificate payloads for 802.1X networks.

This lecture introduces students to the automatic certificate technologies of SCEP and ACME.

In this demonstration, students are shown how to configure an Internet proxy payload for a Network configuration profile.

This demonstration provides students with an example of how to configure a VPN server payload for iOS and macOS.

In this assignment, students will apply what they have learned about Network Configuration payloads to create a distributable Wi-Fi configuration profile for their home network.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lecture, students are introduced to managed distribution and the benefits of using this method over issuing redemption codes for Apps and Books.

In this demonstration, students see the step-by-step process for redeeming an app, synching it to an MDM server, and assigning it to a device through the Mosyle MDM solution.

In this demonstration students will learn how to configure App Update behavior for iOS devices using a DMS/MDM.

In this demonstration students will learn how to configure third-party software updates using an MDM/DMS or another tool like Munki.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.

In this lecture, students are introduced to identity services, the various single sign-on methodologies, and how they work on Apple platforms.

In this demonstration students see how Kerberos SSO works with an on-prem Microsoft Active Directory domain.

In this demonstration students learn how to configure Enterprise SSO for single sign-on of iOS devices to corporate resources using a Microsoft Entra ID tenant.

In this demonstration students learn how to configure Platform SSO, allowing macOS users to sign into their Mac using their Microsoft Entra ID credentials.

In this lesson students will learn how to configure Platform SSO to ensure that the user created during Setup Assistant is integrated with an identity provider from the start.

In this lesson students are introduced to Authenticated Guest Mode, a new way to allow users to securely authenticate to a Mac in a shared environment like a computer lab or public library.

In this demonstration students will learn how to bind a Mac to an Active Directory domain through an on-prem Active Directory server on a local area network.

In this lecture, students learn about PIV card integration and explores password-less authentication flows using Apple devices.

Apple recommends studying many additional knowledge base articles and user guides when preparing for the Apple Deployment and Certification exam. Review these materials prior to continuing to the next section.

In this optional lesson, I have included a ‘Deep Dive’ podcast that I generated with NotebookLM that covers the topics presented in this section using the presentation, videos, and apple documentation linked therein.