Integrating Trio with Apple Business Manager (ABM) or Apple School Manager (ASM) lets you automate enrollment, push apps, and manage Apple devices at scale. Follow the steps below to choose the right program and connect its required services.

Before You Begin

Role required: Security Admin or Fleet Admin
Apple prerequisites:
- An active ABM or ASM account.
- Access to the Apple ID that will create certificates and tokens.
Permanent choice: Your first task is picking ABM (corporate) or ASM (education). You can’t change this later, so confirm with your Apple Org Admin before proceeding.

1 Choose Your Apple Enrollment Program

Go to Fleet › MDM Setup › Apple.
Select Apple Business Manager (ABM) or Apple School Manager (ASM).
- ABM — for companies managing iPhone, iPad, Mac, and Apple TV at scale.
- ASM — for schools managing Apple devices used by students and teachers.
Click Confirm. Trio locks this choice and loads the integration checklist.

2 Connect Apple Business Manager Integration

(Screens below show ABM; the ASM flow is identical.)

Service	Why it’s needed	Status states	Action button
Apple Push Notification Service (APN)	Required for remote management and app push.	Not Connected → Connected	Set up Certificate
Automated Device Enrollment (DEP)	Auto-enroll devices right out of the box.	Not Connected → Connected	Set up Automated Device Enrollment
App & Book Management (VPP)	Push paid or free apps and books to devices.	Not Connected → Connected	Connect VPP Account

2.1 Set up the APN certificate

Click Set up Certificate.
Download Trio’s CSR file.
In a new tab, sign in to Apple Push Certificates Portal and upload the CSR.
Download the generated .pem file and upload it back to Trio.
Once verified, APN shows Connected with your Apple ID, certificate UID, and expiration date.

2.2 Enable Automated Device Enrollment (DEP)

Select Set up Automated Device Enrollment.
In ABM/ASM, create a MDM server token and download the .p7m file.
Upload the token to Trio and name the server (e.g., Trio MDM Server).
Status flips to Connected, showing token expiration and linked-device count.

2.3 Connect App & Book Management (VPP)

Click Connect VPP Account.
In Apps and Books within ABM/ASM, generate a VPP token (.json).
Upload the token to Trio.
Status updates to Connected with license totals.

3 Verify Your Integration

When all three services show Connected in green:

Newly assigned devices in ABM/ASM will auto-enroll into Trio.
You can push third-party or custom apps directly from Software Management.
Remote commands (lock, wipe, restart) work immediately.

Troubleshooting

Issue	Symptom	Fix
APN Not Connected	Certificate upload fails	Confirm the Apple ID used matches the one shown in the portal and that the .pem file hasn’t expired.
DEP token expired	Devices stop auto-enrolling	Generate a new server token in ABM/ASM and upload it to Trio.
VPP license count 0	Apps won’t deploy	Make sure the VPP token is tied to the correct location and that you’ve purchased app licenses.
“This selection can’t be changed” banner appears	Trying to swap ABM ↔ ASM	Create a new Trio workspace if you truly need the other program; Apple forbids switching.