Table of Contents

• Welcome
• About this reference
• What’s new in device deployment
• Integration and setup
  • Intro to integration and setup
  • Apple School Manager
  • Apple Business Manager
  • Wi-Fi
    • Join Wi-Fi
    • Wi-Fi network design
      • Getting proper Wi-Fi coverage
      • Getting proper Wi-Fi capacity
      • Network naming
    • Wi-Fi specifications for Mac computers
    • Wi-Fi specifications for Apple TV
    • Connecting devices to 802.1X networks
  • AirPlay
    • AirPlay discovery
    • AirPlay security
    • AirPlay recommendations
  • Filtering content
  • Standards-based services
  • Integration with Microsoft services
    • Integrating with Microsoft Exchange
    • Integrating with Azure AD
    • Integrating macOS with Active Directory
  • Bonjour
    • Intro to Bonjour
    • Bonjour DNS entries
      • Wide-area DNS Service Discovery
      • How DNS Service Discovery functions
      • Configuring DNS Service Discovery
      • Microsoft DNS and DNS Service Discovery
      • Using $INCLUDE files for DNS Service Discovery
      • Setting up wide-area AirPrint
• Deployment planning and provisioning
  • Intro to deployment planning and MDM enrollment
  • Deployment models
  • User Enrollment
  • Device Enrollment
  • Automated Device Enrollment
• Configuration management
  • Intro to configuration management
  • Setup Assistant
  • Mobile device management (MDM)
    • Intro to MDM
    • Choosing an MDM solution
    • Enrolling devices in MDM
    • Configuring your network for MDM
    • Allowing devices to work with APNs
    • Enabling device supervision
  • Classroom
• Identity management
  • Intro to identity management
  • Single sign-on
    • Intro to Kerberos Single sign-on
    • Single sign-on extension
    • Kerberos SSO extension with macOS
  • Managed Apple ID
  • iCloud
    • Intro to iCloud
    • iCloud Drive
    • iCloud Keychain
  • iMessage and FaceTime
• Content distribution
  • Intro to content distribution
  • Deploying apps and books
  • Deploying managed apps and books
  • Deploying custom apps
  • Preparing to distribute in-house macOS apps
  • Content caching
    • Intro to content caching
    • Scalability and storage
    • Discovering across multiple public IP addresses
    • Multiple content caches
    • Best practices
• Device security
  • Device management security
  • Activation Lock
  • Remote wipe and remote lock
  • Software update process
  • Encryption and Data Protection
    • Intro to encryption and data protection
    • Role of Apple File System
    • Policy enforcement
    • Password policies
    • Digital signing and encryption
    • FileVault
      • Managing FileVault
      • Using Secure and Bootstrap tokens
    • Smart card integration
      • Intro to smart card integration
      • Using a smart card in macOS
      • Configuring macOS for smart card–only authentication
      • Advanced smart card options
  • About persistent tokens
  • macOS system security
    • Startup security
    • macOS access
    • Kernel extensions in macOS
    • Keychain architecture in macOS
  • App security
    • Intro to app security
    • Using Gatekeeper
    • App security enhancements
  • Network security and certificates
    • Network security
    • Intro to certificate management
    • Certificate deployment
  • Secure access using VPN
    • Intro to VPN
    • VPN On Demand
    • Per App VPN and app-to-VPN mappings
    • Always On VPN
    • SSL VPN clients
    • VPN proxy and certificate configuration
• Appendixes
  • Apple TV management
  • AppleCare support
  • AppleSeed for IT
  • MacBook Pro Wi-Fi specification details
  • MacBook Air Wi-Fi specification details
  • Wi-Fi specification details for Apple TV
• Document revision history