Zero-touch deployment (ZTD) means devices you order arrive and enrol themselves on first boot. This article shows how to link Apple Business or Microsoft Entra to your catalogue so Factorial IT can do that for every order.

Feature/Functionality

Overview

ZTD relies on supplier accreditations, and those accreditations depend on the region:

• Macs enrol through Apple Business.
• Windows devices enrol through Microsoft Autopilot.

In each region, only accredited suppliers can offer these services, and they only ship devices with that region's local keyboard.

That is why the keyboard matters. If you order a device with a keyboard from another region, the order goes to a different supplier with no ZTD accreditation, and the device will not enrol on its own.

How to use

Apple

Allow the reseller to add the Apple devices you order to your Apple Business account, so they enrol automatically.

1. Go to Global purchasing > Settings > Shipping countries.
2. Next to the country you want, click Zero Touch Apple > To Setup > Zero-Touch Deployment for Macs > Enable.
3. Pick your existing Organization ID, or create one. For a new one, name it with your company name plus the country's ISO code (for example, FR for the French catalogue). In the ID field, type the number Apple Business shows under Devices > Inventory > Apple Customer Number.
4. In Apple Business, click Devices > Inventory > Customer Number > Add > Reseller Number, and enter the reseller number shown in the console.
5. Back in the console, tick "I've added these Reseller IDs in Apple Business" and click Confirm.

Microsoft

1. Go to Global purchasing > Settings.
2. Under Zero-Touch Procurement, click Windows.
3. Choose the country or countries where you want Autopilot on your orders, then click Authorize our reseller.
4. Follow the instructions on screen.
5. A confirmation screen tells you the partner relationship now exists.
6. Sign in to the Azure portal and search for Microsoft Entra ID.
7. Copy your Tenant ID and Primary Domain and paste them into the console.
8. Switch on the configuration toggle to finish the integration.

Troubleshooting and FAQ

Troubleshooting

• An ordered device did not enrol on its own. Check the keyboard on the order. A non-local keyboard routes the order to a supplier that cannot do ZTD.
• Apple devices from a country do not appear in Apple Business. Check that Zero Touch Apple is enabled for that shipping country and that the reseller number is added under Customer Number in Apple Business.
• Windows zero-touch is not active after authorising the reseller. Make sure you pasted the Tenant ID and Primary Domain and switched the configuration toggle on.

FAQ

1. Why does the keyboard change whether zero-touch works?
   Only suppliers accredited in a region can offer ZTD, and they only ship that region's keyboard. A different keyboard means a different, non-accredited supplier.
    
2. Where do I find the number for the Organisation ID?
   In Apple Business, under Devices > Inventory > Apple Customer Number.
    
3. Which Microsoft values does the console need?
   Your Tenant ID and Primary Domain, both in Microsoft Entra ID in the Azure portal.
    
4. Do I still need to register Windows devices ordered this way in Autopilot?
   No. With the reseller authorised, the devices you order are handled for you. Devices bought elsewhere still need registering by hand.