Carrier DEP, explained — and why so few resellers can do it

Zero-touch enrolment is the difference between a device that configures itself on first boot and a device that needs a person, a cable and forty minutes.

The mechanism is simple in principle. A device registered in Apple Business Manager is linked to your organisation at the hardware level. When it is activated, it contacts Apple, discovers it belongs to you, and enrols into your MDM automatically — supervised, configured and locked to your management, before anybody touches it.

The catch is the first clause: a device registered in Apple Business Manager.

How devices get into ABM

There are three paths.

Bought direct from Apple. The customer number is linked to your ABM instance and devices appear automatically. Clean, and the reason large organisations buy direct.

Bought from an Apple Authorised Reseller. The reseller’s Apple reseller number is linked to your ABM instance and devices they supply appear the same way.

Bought from a carrier. This is where it gets interesting, and where most Australian organisations actually buy their iPhones — bundled with a plan, through a telco account, on a device payment arrangement.

The carrier gap

Historically, a phone that arrived on a carrier plan was invisible to Apple Business Manager. It was a retail device as far as Apple was concerned. To manage it you had to enrol it manually — which meant either physically handling every device with Apple Configurator, or using a user-driven enrolment that is not supervised and can be removed by the user.

For a fleet of any size, that is the difference between shipping a device to somebody’s home and having it work, versus asking four hundred people to come to an office.

Carrier DEP — often written CDEP — closes that gap. It is an Apple programme that allows an authorised party to register carrier-supplied devices into Apple Business Manager, so those devices behave exactly like ones bought direct.

Why it is rare

Carrier DEP requires the reseller to hold Apple Authorised Reseller status and to be enabled for the programme, with the operational discipline Apple expects around it. In Australia the intersection of “Apple Authorised Reseller”, “enabled for Carrier DEP” and “small-to-medium business” is very small. CDTS is one of the few in it.

That is not a marketing point on its own. It matters because of what it makes possible.

What it makes possible

Zero-touch on carrier-supplied hardware. Devices bought on a telco plan enrol on first boot, supervised, without being handled.

Retrospective enrolment. This is the one that surprises people. Devices you already own — already issued, already in the field, bought years ago on a carrier account — can be brought into Apple Business Manager. The device does need to be reset to pick up its new enrolment, but you are no longer choosing between a supervised fleet and an unmanaged one.

Supervision across the whole estate. Supervision unlocks the controls that matter: restrictions that cannot be removed by the user, activation lock managed by the organisation rather than by an individual Apple Account, and the ability to wipe a device you no longer control.

A single lifecycle. Buy, register, stage, enrol, support, retire — through one party who is accountable for all of it.

The practical questions to ask

If you are buying iPhones on a carrier plan today, three questions are worth asking:

1. Are these devices in our Apple Business Manager instance? If nobody knows, they are almost certainly not.
2. Are they supervised? An unsupervised device can have management removed by the person holding it, and you will not necessarily be told.
3. What happens when one is lost? Without supervision and organisational activation lock, the answer is often “we ask them nicely”.

Worth knowing

None of this requires changing carrier or abandoning your device payment arrangements. Carrier DEP works alongside the commercial relationship you already have — it changes how the devices arrive, not who you buy them from.

If you have an existing carrier-supplied fleet that never made it into Apple Business Manager, that is a solvable problem, and it is usually the cheapest improvement available to a mobile programme.