iOS mobile devices require profiles and enrollment for management. Administrators must create APN certificates to enroll iOS mobile devices. If the APN certificate is revoked or expires, iOS mobile devices cannot be managed. All unmanaged iOS mobile devices must be re-enrolled.

How to generate an Apple Push Notification (APN) Certificate 

1. Log on to the WFBS-SVC console.

2. Click Administration.

   

3. Click Device Enrollment Settings.

   

4. Click Upload APNs Certificate.

   

5. Click Download Trend Micro CSR.

   

6. Go to the Apple Push Certificates Portal and sign in with your Apple ID.

   

7. Click Create a Certificate.

   

8. Upload the downloaded certificate from step 5.

   

   

9. Click Download to download the MDM Certificate.

   

10. Upload the downloaded "MDM Certificate" on the WFBS-SVC Console.

    

    

How to Enroll an iOS Device 

1. Click on the Security Agents tab.

   

2. Click Add Security Agents.

   

3. From the Add Security Agents to dropdown list, select which group you want to add the Security Agent to.

   

    
   The default group will automatically add Security Agents to the Server (default) or Device (default).
4. Click either Bulk Send or Single Send.

   

   1. Bulk Send is used to send installation invitation emails to multiple users at the same time, perform the following steps:
      1. Under the Send Installation Invitation option, click Bulk Send.
      2. Create a CSV file with the email addresses of users to send the invitation email. To obtain the template file, click Download Template.
          
         You can specify up to 500 entries in the CSV file.
          
      3. Click Upload File and upload the CSV file that you have created.
      4. (Optional) Configure the email content.
      5. Click Send to send an installation invitation email to the users specified in the CSV file.
   2. Single Send is used to send an installation invitation email to a single user
      1. Bulk Send - the QR code is already included in the Bulk Send invitation email
      2. Single Send - to obtain the QR code, click View email content to display the email content then click Download QR Code. QR code can be included in the installation invitation email.

5. Open or copy and paste the link to a web browser or scan the QR code that was sent via email.

   

6. Proceed with the steps below and read and accept the Terms of Use. Once ready, tap on Continue.

   

7. Tap on Allow then tap Close then go to your phone Settings and proceed with instructions.

   

8. Go to your phone Settings > General > Select VPN & Device Management or Device Management > Select Trend Micro Worry-Free Business… Profile > Tap Install, tap Install, then tap Trust.

   

9. Enter your Security Code or PIN for Authentication if there is any.
    
   • iOS can only have one MDM on a device. Delete the existing MDM, and upload a new Trend Micro MDM if you want to install the Mobile Security for Business app.
   • When a user removes a registration profile, all configuration profiles, profile settings, and managed apps for that registration profile will also be removed.

10. Tap on Done. Then tap Install to proceed with App Installation and wait for it to complete.

    

11. Tap Allow to allow Notifications then tap Allow While Using App to allow Location Services.
     
    After the initial setup, the first Configuration Manager Scan will be triggered to scan iOS settings.

    

For further assistance, please contact Trend Micro Technical Support>.