What must be installed on a device so you can manage it with MDM?

To manage an Apple device with a Mobile Device Management (MDM) solution, an enrollment profile must be installed. This profile is a specific type of configuration profile containing an MDM payload. The payload includes the server URL and other necessary information that directs the device to communicate with the MDM server. The installation of this profile initiates the enrollment process, establishing a trusted relationship and allowing the server to send commands and configurations to the device.

A. A provisioning profile: This is incorrect because provisioning profiles are used by developers to permit an app to be installed on specific devices and to use certain services like Push Notifications or iCloud.
B. A supervision identity: This is incorrect because a supervision identity is a certificate stored on a Mac running Apple Configurator, used to establish ownership and control over a device, not installed on the device itself for enrollment.
D. Apple Configurator: This is incorrect because Apple Configurator is a macOS application used to manually configure and enroll devices; it is not installed on the managed iOS, iPadOS, or tvOS device.

1. Apple Inc.

"Apple Platform Deployment

" Intro to mobile device management

(Nov 2023). In the "How mobile device management works" section

it states

"The process starts by installing an enrollment profile

which can be done by the user or automatically."

2. Apple Inc.

"Apple Platform Deployment

" Choose an MDM enrollment method

(Nov 2023). This guide details that all methods—User Enrollment

Device Enrollment

and Automated Device Enrollment—rely on the installation of an enrollment profile to link the device to an MDM server.

3. Apple Developer Documentation

"MDM Protocol

" Device enrollment. The documentation specifies that MDM enrollment is initiated when the device receives and installs a configuration profile containing an MDM payload.