What to configure first for Apple Configurator iPad enrollment in Intune

MD-102 By islever Editorial Last updated

Enroll devices to Microsoft Intune

Short answer

A Configure an Apple MDM push certificate first so the 25 iPads can establish trust and enroll through Apple Configurator.

Question

You have a Microsoft 365 E5 subscription and 25 Apple iPads.
You need to enroll the iPads in Microsoft Intune by using the Apple Configurator enrollment method.
What should you do first?
  1. Configure an Apply MDM push certificate. Correct Answer
  2. Add your user account as a device enrollment manager (DEM).
  3. Modify the enrollment restrictions.
  4. Upload a file that has the device identifiers for each iPad.

Key Takeaways

The question tests the prerequisite order for Apple Configurator enrollment and the trap that uploading device identifiers is only a Setup Assistant enrollment step, not the foundational first task.

Apple Configurator enrollment for iPadOS in Microsoft Intune requires an Apple MDM push certificate before devices can be enrolled. This page confirms option A as the first prerequisite and explains why the serial-number upload in option D is only a Setup Assistant step.

Common mistake: Choosing option D and uploading iPad serial numbers first is the common mistake; device identifiers are needed only for Apple Configurator Setup Assistant enrollment, while the Apple MDM push certificate is the prerequisite that establishes Intune management for Apple devices.

Expert Analysis

Why option D looks right Option D — uploading a file with each iPad’s device identifiers — is the most attractive wrong answer because Apple Configurator workflows often involve a CSV of serial numbers. For Setup Assistant enrollment, Intune does require device serial numbers so the devices can be preassigned. The phrase “device identifiers for each iPad” mirrors that step, and with 25 iPads it sounds like the natural bulk-enrollment task. However, that upload is a method-specific prerequisite for Setup Assistant enrollment, not the first action for Apple Configurator enrollment in general.

The missing foundational prerequisite Option A is correct: configure an Apple MDM push certificate first. Intune needs this certificate to establish trust with Apple Push Notification service and manage iPadOS devices. Without it, the iPads cannot be enrolled or managed through Intune, regardless of whether you use Apple Configurator, Setup Assistant, or another Apple enrollment path. The typo “Apply MDM push certificate” should be read as “Apple MDM push certificate”; the certification objective is still the push certificate.

Why the other options fail Option B is wrong because adding an account as a device enrollment manager changes who can enroll devices; it does not establish Apple MDM trust. Option C is wrong because enrollment restrictions control which platforms or ownership types may enroll, not whether Intune can communicate with Apple. Option D is not “first” because identifiers matter only for certain Setup Assistant flows and come after the certificate is in place. The decisive point is that the question asks for the first prerequisite common to the Apple Configurator method, and that is option A. The supplied comments repeatedly align with Microsoft’s prerequisite list, which places the push certificate ahead of serial-number handling.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When a question asks what to do first for an Apple enrollment method, separate universal Apple MDM prerequisites from method-specific steps. Certificates establish the Intune–Apple trust relationship and must precede any enrollment or identifier upload. Read option wording for typos such as “Apply MDM push certificate” as the intended Apple certificate. Use elimination: DEM and enrollment restrictions affect who or which platform can enroll, but neither creates Apple management trust.

Frequently Asked Questions

Does Apple Configurator enrollment require device serial numbers in Intune?

Only the Setup Assistant flavor requires uploading serial numbers; direct Apple Configurator enrollment does not. Either way, configure the Apple MDM push certificate first.

Why is a device enrollment manager not the first step for 25 iPads?

DEM is an enrollment-method permission for user-affinity scenarios and does not establish Apple MDM trust. The push certificate is the prerequisite before Apple Configurator can enroll the iPads.

What happens if I skip the Apple MDM push certificate?

Intune cannot communicate with Apple Push Notification service for those devices, so enrollment and management cannot work. Add the certificate before attempting Apple Configurator enrollment.

More MD-102 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 10 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 10

  1. letters1234 👍 10 Answered A
    Pre-requisites - https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-configurator-enroll-ios
  2. 5bd2675 👍 4
    A is correct, but shouldn't it say "Apple" not "Apply"
  3. Haider_Raza 👍 3 Answered A
    To enroll the Apple iPads in Microsoft Intune using the Apple Configurator enrollment method, you should first configure an Apple MDM push certificate. This certificate is required to establish trust between the iPads and the Intune service, enabling them to enroll and be managed through Intune. After obtaining the MDM push certificate, you can proceed with the enrollment process using the Apple Configurator tool.
  4. krzysztofbr 👍 3
    A. Configure an Apply MDM push certificate. from MS website Prerequisites Physical access to iOS/iPadOS devices Set MDM authority An Apple MDM push certificate Device serial numbers (Setup Assistant enrollment only) USB connection cables macOS computer running Apple Configurator 2.0
  5. VirtualJP 👍 2 Answered A
    Pre-reqs
Show 5 more comments
  1. Darkfire 👍 1 Answered A
    A is correct https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-configurator-enroll-ios#:~:text=An%20Apple%20MDM%20push%20certificate
  2. Eagle-eye 👍 1 Answered A
    A is correct. https://learn.microsoft.com/en-us/intune/intune-service/enrollment/apple-mdm-push-certificate-get
  3. _Dinkan_ 👍 1 Answered A
    https://learn.microsoft.com/en-us/intune/intune-service/enrollment/apple-mdm-push-certificate-get
  4. Tonsku 👍 1 Answered A
    https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados
  5. MR_Eliot 👍 1 Answered A
    A is correct.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Assigning Intune and Cloud PC Roles with Least Privilege

S-grade

SCEP Root Certificate Location for Intune

S-grade

How Many Intune Profiles Are Needed for Cloud PKI User Certificates?

S-grade

What Must Be Purchased First for Intune Device Query at Minimum Cost?

S-grade

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide