In the second part of this two part series I will be showing you how you can enrol a device within Intune in ConfigMgr.
Part One ‘Implementing Intune integration into ConfigMgr 2012 R2 in a Lab Environment’ is available to view here.
Setting up an iOS Device
To manage Apple iOS devices an APN (Apple Push Notification) certificate is required. To make a request for the certificate you need to open up the ConfigMgr console and navigate to the Administration workspace and select Cloud Services>Microsoft Intune Subscriptions. Right click and choose ‘Create APN certificate request’.
Choose a location to save the certificate request to and click Download.
Sign into the Intune portal with your onmicrosoft.com administrative account.
Once the request has been made click Close.
The certificate will reside in your download location.
Connect to the Apple Push Notification Portal at https://idmsa.apple.com/IDMSWebAuth/login?appIdKey=3fbfc9ad8dfedeb78be1d37f6458e72adc3160d1ad5b323a9e5c5eb2f8e7e3e2&rv=2. Note that it is recommend that you do not use Internet Explorer to do this as there are issues downloading the .pem file. I have tested this on Microsoft Edge and the site does not load properly once logged in. Therefore I am using Google Chrome.
Enter your Apple ID login details. You must create an Apple ID if you do not have one.
Click Create a Certificate
Accept the T’s & C’s
Click ‘Choose file’ and upload the generated request file.
This will create a certificate that is valid for one year. Click Download.
In the ConfigMgr console return to the Administration workspace. Go to Cloud Services>Microsoft Intune Subscriptions. Right click Microsoft Intune Subscription and select Configure Platforms>iOS
Enable iOS enrollment and browse to select the .pem file. I’ve also ticked to be alerted 10 days before the expiration of the certificate. Click Ok. (Note there is a bug with ConfigMgr 2012 R2 SP1 and the alert check box – if using this version do not tick the box)
When checking the APN certificate again in the properties note that you will get the following displayed.
Now that enrolment is configured devices can be enrolled.
Enrol an iOS device
On an iOS device go to the App Store and search for intune. Get the Microsoft Intune Company Portal app.
Once loaded enter a UPN address/password of a synced Intune account
When prompted enroll the device.
To install the profile click Install.
Confirm the install of the profile by selecting Install
Trust the Remote Management prompt
When the profile is installed click Done
To complete the enrolment process select Done
The device is now enrolled successfully
The device is also listed in the ConfigMgr console in the Devices node