Trio

Automated Device Enrollment (DEP) lets Apple Business Manager (ABM) or Apple School Manager (ASM) assign new Macs, iPads, and iPhones to Trio before they even leave the box—true zero-touch provisioning. Important: you must connect Apple Push Notification Service (APN) first. Follow the steps in <a href="https://help.trio.so/en/articles/11885627-connect-apple-push-notification-service-apn">Connect Apple Push Notification Service (APN)</a> and verify APN shows Connected before starting DEP.

___________________________________________________________

Go to Fleet → MDM Setup → Apple.

Click Set up Automated Device Enrollment next to Automated Device Enrollment (DEP).

The Connect to Automated Device Enrollment (DEP) wizard opens on Step 1 • Download Token.

1. Go to Fleet → MDM Setup → Apple.
2. Click Set up Automated Device Enrollment next to Automated Device Enrollment (DEP).
3. The Connect to Automated Device Enrollment (DEP) wizard opens on Step 1 • Download Token.

Click Download Public Key. Save the file (<code>trio-public-key.pem</code>) to your computer; Apple will need it to generate the server token.

2. Create the MDM server and token in ABM/ASM

Sign in to <a href="https://business.apple.com/" rel="nofollow noopener noreferrer" target="_blank">https://business.apple.com</a> or <a href="https://school.apple.com/" rel="nofollow noopener noreferrer" target="_blank">https://school.apple.com</a> with your Apple ID.

In the lower-left corner, click your account name ➜ Preferences ➜ Device Management Settings ➜ Add.

Enter a server name (e.g., Trio MDM Server).

Upload the <code>trio-public-key.pem</code> file in Upload Public Key.

Click Save. Apple generates an MDM server entry.

Select the server you just created and click Download Token to save the <code>.p7m</code> file.

1. Sign in to <a href="https://business.apple.com/" rel="nofollow noopener noreferrer" target="_blank">https://business.apple.com</a> or <a href="https://school.apple.com/" rel="nofollow noopener noreferrer" target="_blank">https://school.apple.com</a> with your Apple ID.
2. In the lower-left corner, click your account name ➜ Preferences ➜ Device Management Settings ➜ Add.
3. Enter a server name (e.g., Trio MDM Server).
4. Upload the <code>trio-public-key.pem</code> file in Upload Public Key.
5. Click Save. Apple generates an MDM server entry.
6. Select the server you just created and click Download Token to save the <code>.p7m</code> file.

Back in the Trio wizard, drag-and-drop the <code>.p7m</code> file into Upload MDM Server Token (Step 3).

Click Connect. Trio validates the token and shows DEP as Connected, along with server name, token expiration, and the number of linked devices.

1. Back in the Trio wizard, drag-and-drop the <code>.p7m</code> file into Upload MDM Server Token (Step 3).
2. Click Connect. Trio validates the token and shows DEP as Connected, along with server name, token expiration, and the number of linked devices.

When the token nears expiration, Trio emails reminders 30, 15, and 7 days out.

Devices assigned to Trio MDM Server in ABM/ASM will auto-enroll during setup.

You can bulk move existing devices to Trio by selecting them in ABM/ASM and choosing Edit Device Management.

All linked devices appear in Fleet → Devices with an enrollment method of DEP.

- Devices assigned to Trio MDM Server in ABM/ASM will auto-enroll during setup.
- You can bulk move existing devices to Trio by selecting them in ABM/ASM and choosing Edit Device Management.
- All linked devices appear in Fleet → Devices with an enrollment method of DEP.

Connect Apple Automated Device Enrollment: Download public key, create the server token, upload .p7m, and enable zero-touch provisioning.

Connect Automated Device Enrollment (DEP)

Create a custom design with text, images, and links

Login

Website

Trio Blog

Find answers and get help from Intercom Support and Community Experts

Conversations you've started through the messenger will appear here.

No conversations created by you

Try using different keywords or checking for typos.

No conversations found

Title

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Empty Help Center

Uh oh. That page doesn’t exist.

Home

Search results

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

No tickets created by you

No tickets found

Track the progress of all tickets and conversations related to your company.

Customer Portal.

Track the progress of all tickets related to your company.

Tickets portal.

{assigneeName} needs more information from you

Tickets

No access to tickets portal

Search and ask

Find guides, answers, and references.

Skip the search. Describe what you’re trying to do and get a grounded answer.

Browse articles and guides in this topic.

Create your workspace and invite the people you work with.

Set up your account

Build your first workflow and watch it run end to end.

Ship something

Connect the tools your team already uses to bring data in.

Connect your stack

A quick lap of the product so you know where everything lives.

{appName} in 60 seconds

This prototype demo is aware that you are reading “{title}”. It can point you back to the current article, but a production article-aware Fin contract is still follow-up work.

Prototype article-aware answer

Because you already asked about invitations, this prototype demo can add the follow-up: use the role selector before sending each invite to limit access to the teammate responsibilities.

Prototype role-limiting follow-up

This prototype demo suggests starting with your workspace profile, inviting the team members who need access, and then connecting the integrations you use.

Prototype getting-started answer

In this prototype demo, integrations are configured from workspace settings. Choose the integration, connect the account, and review the enabled permissions.

Prototype integrations answer

In this prototype demo, invite teammates from workspace settings, then choose the access each teammate needs before sending the invitation.

Prototype invite-team answer

This prototype demo does not have a scripted answer for that question yet. Try asking how to invite your team or open a source article. No production Fin API was called.

Prototype answer unavailable

I’ve got this page open. Ask me anything about it and I’ll answer from the docs.

Requirement	Details
Role	Security Admin or Fleet Admin
APN status	Connected in MDM Setup
Apple account	ABM or ASM account with Admin or Device Enrollment Manager privileges
Files	• Public key (`.pem`) downloaded from Trio• Server token (`.p7m`) downloaded from ABM/ASM

Issue	Symptom	Fix
“Token invalid” on upload	Wizard won’t accept `.p7m`	Make sure you downloaded the token after uploading Trio’s public key and that the file hasn’t been renamed.
DEP shows Not Connected	Status badge is gray	Re-upload a fresh token; Apple tokens expire yearly or when the server is edited.
Devices don’t auto-enroll	Mac/iPad skips MDM screen	In ABM/ASM, confirm the device is assigned to Trio MDM Server and has an internet connection on first boot.
Token expired notification	Email alerts from Trio	Generate a new token in ABM/ASM and upload before the expiration date to avoid interruptions.

Connect Automated Device Enrollment (DEP)

Prerequisites

Open the DEP Wizard

Step-by-Step Setup

1. Download Trio’s public key

2. Create the MDM server and token in ABM/ASM

3. Upload the server token to Trio

What Happens Next?

Troubleshooting