Link to an external device management service in Apple School Manager
In Apple School Manager you need to link to at least one external device management service before you can begin assigning devices to it.
Before you begin, review Intro to device management services.
About service tokens
When you link to external device management service, you upload a certificate and download a service token. A user with the proper permissions needs to replace the active token on an external device management service in these situations:
When creating a new public key or generating a new token
When the user who downloaded the token changes their Managed Apple Account password
As a security measure, when the user who downloaded the original token leaves your organization
Important: External service tokens expire after one year and require replacement. Depending on the device management service, you may or may not get a warning that a token is going to expire. Well before a token is about to expire, sign in to Apple School Manager, generate and download a new token for the device management service, and transfer that token to the service for immediate installation. See your device management service’s documentation for information about how to transfer the token.
Link to an external device management service
In Apple School Manager
, sign in with a user who has the role of Administrator, Site Manager, or Device Enrollment Manager.Select your name at the bottom of the sidebar, select Preferences
, then select Device Management Service Assignment 
.Select Add
, then enter a unique name for the service.If you don’t want this device management service to have the ability to release devices, see Release devices.
Upload the public key certificate file, then select Save.
Note: You can’t upload more than 250 public key certificate files.
Select Download
, then select Download Device Management Service Token.Upload the token to a specific service. Consult your device management service’s documentation to complete this step.
Repeat steps 3 through 6 for any additional device management services you want to link to.
To replace the token, you need to download a new token.