Skip to main content

Enroll Device into Jamf (MDM Solution for MacOS) and Company Portal Registration

Updated

Directions for use:
Please note that this document has 4 parts.

Part 1: Setting up the Mac
Part 2: Enrol in MDM
Part 3: Register within the Company Portal App


It is advised that you read the full document before performing the steps.

Important Changes

Your MacBook Password will update to align with your Email address Password (at the end of step 2).

It is not permitted to use personal iCloud accounts on a company device, instead it is advised (if use of an iCloud account is needed) that you create one using your Alchemy email address, first making the Service Desk servicedesk@alchemyglobalsolutions.com aware.

 

 

Part 1: Setting up the Mac 

  • When setting up the Mac, you will be met with a few screens, below are the important ones to set, in no particular order:
Select-your-region.jpg

 

  • Ensure that you set your country location correctly, and that when prompted, you enable location services
create-computer-account.jpg
  • Above, enter your full name, and this should populate the account name to be firstlast (johndoe) and enter the password, it is recommended that you make this the same as the email password (if already set) as this will be performed systematically later on if not.
  • Other than this, Siri, Dictation, Keyboard language etc. is personal preference except for Sharing Analytics with Apple, which we should disable.

 

Part 2: Self Enrolment Method and Password change at first login using Link 

  • Once you are sign in with correct local account. 
  • Open this link to enroll device into Jamf: https://alchemy.jamfcloud.com/enroll
  • Type Your Alchemy Username: "firstname.lastname@alchemyglobalsolutions.com” and click Enroll
enroll.png
  • Enter Email Address and Password provided by Alchemy Support Engineer
  • On First login it will ask to change password and configure Multi Factor Authentication,
  • Please set strong password and setup MFA with Microsoft Autenticator app on your mobile phone.
continue.png
  • Click 'Continue' to download the MDM Profile.
finder.png
  • Go to Finder in bottom left of the Dock
downloads.png
  • Open the Downloads folder and double click the enrollmentProfile.mobileconfig 
  • This will prompt you to open your Settings, and at the top will be the option to Install the certificate.
MDM Profile.png
  • Double click the MDM Profile as shown above
Install cert.png
  • Click 'Install' on the bottom left of the window shown.
Install Yes.png
  • Click install and provide your password to the pop-up window above.

Please allow a few minutes for the below ‘Jamf Connect’ login screen to appear, then continue with the steps.

  • Enter Alchemy Username and Password (same for Outlook, Teams etc.)
  • Proceed with Multi Factor Authentication if asked
Jamf Connect.png
  • Another prompt which will ask to sync your local account password with Office 365 account (Alchemy Account) if they're not already the same
    • Enter Local Password
sync local password.png

You have reached the end of Part 2, please take the time to review Part 3 before completing any further steps.

In the meantime, Jamf will install all relevant configurations and applications for your device. The two most important before we can continue, is the ‘Self Service’ application and the ‘Company Portal’ Application as they are required for Part 3. Note this may take some time depending on Internet Connectivity, and current demand on the MDM Server. 

Part 3: Register Device with Company Portal.

  • On left bottom in Dock Click on “Launchpad” and Open “Self Service” App
self-service.png
  • On left side click on Browse → All and click “Register” on CompanyPortal Registration
Company Portal.png

In case you don’t see CompanyPortal Registration, It means Company portal app is installing in the background, Wait for it to complete then in few minutes it will appear. If after 1 hour it does not appear, please contact the Service Desk servicedesk@alchemyglobalsolutions.com for assistance.

  • The Company Portal Application will open, please select ‘Sign In’ as shown below, entering your Alchemy Username and Password if prompted.
sign in.png
  • After successful sign in, Device will be registered with Alchemy Telco Solutions.
  • Press Done to close wizard.
done.png
  • You will then get the below notification ‘Authentication for JamfAAD’ on the top right of the screen, these are just instructions and no need to interact with this.
Auth JamfAAD.png
  • Another prompt will appear, as shown below. Click Continue for “Jamf Conditional Access”
Continue-JamfAAD.png
  • Click Continue again on next window to approve certificate
continue2.png

Enter your device password and click Always Allow (otherwise it will create a loop of this notification).

  • Click ‘Continue’ as shown below.
final.png
  • After successful enrollment, open the Company Portal app from Launchpad (click sign in if prompted) and it should display ‘This device is enrolled with Jamf Device Compliance’ as below.
Copmliance.png
  • If not, please wait for up to 1 Hour and check again, 
  • If there is still no device is showing managed in Company Portal app then do the following to get all prompts again mentioned in Part 4
    • Open Terminal 
    • Run this command: /usr/local/jamf/bin/jamfaad gatherAADInfo
    • And response to all prompts again. 
    • Repeat this method until you get this output: AAD ID acquired for macOS user account “UserName” as seen in the picture below
terminal.png
  • if the status is still ‘Not Managed’ then please reach out to the Service Desk servicedesk@alchemyglobalsolutions.comfor assistance.

Reminder, your local account password has been changed and synced with Alchemy email password. On the next reboot, please use your Alchemy email address and password to sign when prompted.