This guide explains how to configure Apple MDM for your organization and enroll a Mac device in Fixiam.

Prerequisites

Before enrolling a Mac device, an organization administrator must first configure Apple MDM in Fixiam.

You will need:

An Apple ID for your organization
Access to the Apple Push Certificate Portal
Administrator access to the Fixiam Admin Portal
The Mac device you want to enroll

Important: Complete the Apple MDM configuration before attempting to enroll a Mac device.

Part 1: Configure Apple MDM

Step 1: Open MDM Enrollment Settings

Sign in to the Fixiam Admin Portal.
Go to Device Management.
Select Device Settings.
Open General Settings.
Select MDM Enrollment.

Step 2: Download Your CSR

Fixiam uses a Certificate Signing Request (CSR) to establish trust between Apple and your organization using Fixiam's MDM credentials.

Under Download your CSR, select Download CSR.
Save the downloaded CSR file.

Step 3: Sign In to the Apple Push Certificate Portal

Select Go to Apple Portal.
Sign in using your organization's Apple ID.
Follow Apple's instructions to create or configure the MDM push certificate.
Upload the CSR downloaded from Fixiam when prompted by Apple.
Complete the certificate creation process.

Step 4: Provide Your Organization's Apple ID

Return to Fixiam and provide the Apple ID used to manage your organization's Apple devices.

Locate Your Company Apple ID.
Enter your organization's Apple ID.
Complete the remaining MDM configuration steps displayed by Fixiam.

Important: Use the Apple ID that your organization will use to manage its Apple devices.

Once Apple MDM setup is complete, you can begin enrolling Mac devices.

Part 2: Enroll a Mac Device

After Apple MDM has been configured, a Mac device can be enrolled through Fixiam.

The enrollment can be initiated by:

An administrator
A staff user

Step 1: Open Device Enrollment

Sign in to Fixiam.
Go to Device Management.
Select All Devices.
Select Enroll New Device.
Select the Mac OS tab.

Step 2: Start MDM Enrollment

The Mac OS enrollment screen provides the instructions required to enroll the device.

Select Enroll Device via MDM.

Important: Enrolling this device will disable its other local accounts. These accounts are disabled, not deleted. Their files remain on the device and an administrator can restore access.

If no local account on the device matches the user's Fixiam username, a new empty profile is created. Existing data is not moved into the new profile.

Disabled accounts are also hidden from the Mac login screen.

Important: Make sure the Fixiam username corresponds to the intended Mac user account before completing enrollment.

Step 3: Download the Enrollment Profile

When prompted, download the enrollment profile to the Mac.

After the download is complete, open the downloaded profile.

Step 4: Open System Settings

macOS will direct you to System Settings to complete the device enrollment.

Open System Settings if it does not open automatically.
Locate the downloaded enrollment profile.
Select the Fixiam profile.

Step 5: Enroll the Mac

Review the enrollment information displayed by macOS.

Select Enroll to authorize the device enrollment.

macOS will complete the enrollment process.

Step 6: Confirm Enrollment

Once enrollment is complete, the Mac is enrolled in Fixiam and can be managed through the Fixiam Admin Portal.

To verify the device, go to:

Device Management > All Devices

Enrollment Complete

Your Mac is now enrolled in Fixiam.

The device can now be managed according to the organization's configured device management policies.

Troubleshooting

If Mac enrollment does not complete successfully:

Confirm that Apple MDM has been configured for the organization.
Confirm that the Apple MDM certificate is valid.
Confirm that the correct Fixiam user account is being used.
Confirm that the enrollment profile was downloaded successfully.
Check macOS System Settings for the Fixiam enrollment profile.
Retry the enrollment process.

If the issue persists, contact your Fixiam administrator.