Go to Systems Manager > General on the Meraki Dashboard: If Authentication is ticked, this is why you are being prompted   If you want user authentication at the time of enrollment, then users can be created in Systems Manager > Owners   Hope that answers your question   Kind regards,   Paul ... View more

"Do I really need to create profiles in Systems manager for each and every profile on this page?"   I would suggest that this is ALWAYS the case for one simple reason:   If you were to bundle all of them together, and apply them to a device, but then needed to make a change, the ENTIRE profile would be installed again. Now, this normally wouldn't create a problem, but, where Disk access, etc, is being granted, this would prompt the end user several times (for each payload within the profile) rather than once   Hope that this helps   Kind regards,   Paul ... View more

search for LIC-SME-1YR and you'll find it. replace the 1 with 3 or 5, as appropriate ... View more

No, this wouldn't be possible. There's only so much the notification can do, by design and the constraints of push notifications. ... View more

Meraki have a case open with Apple on this currently, so no update as of yet. As soon as we have an update, we'll update this thread ... View more

meraki currently doesn't have support for 3rd party VPN providers custom attributes other than Cisco Anyconnect   The only resolution currently would be to create your VPN config inside Apple Configurator and upload that to SM using the custom mobile config capability:     Whilst you'd still be able to us a static cert for Clint auth, you'd lose the ability to use a unique cert per device capability of SM   Details:         ... View more

I see that the device hasn't checked in since the 1st of December ... View more

The first place to start when looking to see if something is possible is Apple's documentation: https://developer.apple.com/documentation/devicemanagement   I'd start with look at *Profile Specific Payload Keys"   Now, if there's something you want to *prevent* this will almost always be in a Restrictions payload   If you want to Enable something, it is likely to a payload that's available when clicking "Add Settings"   The reason that the list is small for Apple TVOS is because there is less things that you can do with the device!   I found a restriction for you that *may* be relevent:   Allow pairing with Remote app or Control Center widget   But that's the only one I found   ... View more

So, there's a few things to check: As you mention web clips, I assume Apple devices?   1. APNS: Check that your APNS cert is still valid: Organisation > MDM   2. If that's all good, pick a device that you know to be good from the device list and click on it. Scroll down to Online Status : What's the status?    3. Scroll down to your Activity log: when was the last time the device(s) checked in?   4. Go to Organisation > Change Log Have a look to see if any changes were made (especially around WiFi, as @BlakeRichardson mentioned )   Report back with your findings. ... View more

@Richard_W    Does the installer have any need for interaction from an end user? If so, you'll need to do some customisation.   Secondly, the other way to diagnose where the issue may lie is to try and install locally using the command line:   sudo installer -pkg package_name -target /   Change package_name for the name of your installer. If it installs fine, excellent, we'll try something else. If not, looking at your logs may help   Paul     ... View more

Hi. So, the first thing to check is if the policy was applied correctly. You can do this in dashboard by looking at a device, and scrolling to certificates:       So, that's the first place. The second place is to check the installed certs on the device, which you've already done.   The third place is to go to Settings > general > VPN and Device Management > meraki Systems Manager   You'll be able to see everything installed:     If you click on More details and scroll down to certificates:     You'll be able to see which certs have been installed through MDM   Now, if you see your cert here and NOT in the certificates list of the device, it may just be that iOS has chosen not to show that cert   I had a look at : https://developer.apple.com/documentation/devicemanagement/certificateroot and there's nothing to suggest that iOS requires a particular type of cert when being deployed with MDM   Let me know how you get on,   Kind regards,   P ... View more

Regarding your "custom app constantly reinstalls" issue: It's imperative that, as below, your Identifier matches exactly with the identifier of the application     If this is even slightly different, SM cannot determine that the application was installed and will attempt re-installation   What is the suggested route for custom apps is, as a developer, to make the application available in Managed Google Play, as per: https://support.google.com/a/answer/2494992?hl=en#   If this doesn't solve the issue, please report back     ... View more

Right:   So, there can (and should) be only one Apple ID for the APNS certificate. There is zero reason for having more than one. Apple's APNS is incredibly resilient, and geographically diverse, so push notifications coming from a single APNS account is absolutely fine. Here at Cisco, we've 50K+ iOS devices all managed around the world with a single APNS account     As you see from my personal dashboard, I've multiple ADE and VPP accounts: In fact, one is a school.apple.com and the other is a business.apple.com account   I can't see any other place where you'd need an Apple account of some description.   Hope that this answers your enquiry   ... View more

Hi @Radan    When you say "AppleID", what do you mean? Is this for VPP and ADE? Then, if so, we certainly support this   If you are talking about enrollment authentication, then you can certainly have multiple networks to achieve this, one SM network for each site.   If you could add a little more context, we should be able to find an answer ... View more

@kYutobi 's solution is correct. I'll feed back to Product Management that it would be advantageous to scope a security policy to a group of devices.    But, you can, as @kYutobi mentioned, achieve this in a different way, such as:     What is it that you're using the Security Policy for?   ... View more

@PedroDaCosta Can you take us through the flow you use to create the certificate, and which type of FileVault profile you are using? ... View more

You shouldn't have any need to sign into anywhere, unless you have enrollment authentication turned on.   I'm assuming that: You tapped the screen 6 times Scanned the QR Code And the device enrolled? ... View more

@beks88_    We support groups syncing with:   Azure SAML and AD ... View more

So, if you read through the link that @PhilipDAth posted, the answer was in there, but slightly hidden   To remove an app from the VPP list in Systems Manager involves you going to either school.apple.com or business.apple.com (whichever is appropriate)   Click Apps and Books on the left hand side, then find the appropriate app,   Find your MDM server (there may be only one) and transfer the licenses either back to, in the case below, your ASM / ABM instance, or to another MDM server:      and     In the case above, Cisco Meraki + MDM Developer is the name of my ASM instance, and is NOT an MDM server. You can use this as a parking lot / dumping ground ... View more

Not currently supported @beks88_      ... View more