Merge pull request #7961 from lenewsad/macosenrollupdate

Updated public key section per GitHub request

Author: PRMerger5

memdocs/intune/enrollment/device-enrollment-program-enroll-macos.md

@@ -3,12 +3,12 @@
 
 title: Enroll macOS devices - Apple Business Manager or Apple School Manager
 titleSuffix: 
-description: Learn how to enroll corporate-owned macOS devices.
+description: Learn how to enroll macOS devices purchased through Apple Business Manager and Apple School Manager.
 keywords:
 author: Lenewsad
 ms.author: lanewsad
 manager: dougeby
-ms.date: 04/15/2022
+ms.date: 07/11/2022
 ms.topic: how-to
 ms.service: microsoft-intune
 ms.subservice: enrollment
@@ -21,7 +21,7 @@ ms.assetid:
 #ROBOTS:
 #audience:
 
-ms.reviewer: tisilver
+ms.reviewer: benflamm
 ms.suite: ems
 search.appverid: MET150
 #ms.tgt_pltfrm:
@@ -72,30 +72,42 @@ You use the Apple portal to create a token. You also use the Apple portal to ass
 
    ![Screenshot of Enrollment Program Token pane in Apple Certificates workspace to download public key.](./media/device-enrollment-program-enroll-ios/add-enrollment-program-token-pane.png)
 
-3. Choose **Download your public key** to download and save the encryption key (.pem) file locally. The .pem file is used to request a trust-relationship certificate from the Apple portal.
+3. Choose **Download your public key** to download and save the encryption key (.pem) file locally. The PEM file is used to request a trust-relationship certificate from the Apple portal.
 
-### Step 2. Use your key to download a token from Apple
+### Step 2. Use your key to download a token from Apple  
 
-1. Choose **Create a token for via Apple Business Manager** or **Create a token via Apple School Manager** to open the appropriate Apple portal, and sign in with your company Apple ID. You can use this Apple ID to renew your token.
-2. For DEP, in the Apple portal, choose **Get Started** for **Device Enrollment Program** > **Manage Servers** > **Add MDM Server**.
-3. For Apple School Manage, in the Apple portal, choose **MDM Servers** > **Add MDM Server**.
-4. Enter the **MDM Server Name**, and then choose **Next**. The server name is for your reference to identify the mobile device management (MDM) server. It is not the name or URL of the Microsoft Intune server.
+1. Choose **Create a token via Apple Business Manager** or **Create a token via Apple School Manager** to open the Apple portal used by your organization. 
+2. Sign in to the portal with your company Apple ID. You can use this Apple ID to renew your token.
+3. Select your account name to open the portal menu, and then choose **Preferences**. 
+4. Go to your MDM server assignments.
+5. Select the option to add an MDM server.  
+6. Enter the **MDM Service Name**. The purpose of the server name is to help identify your mobile device management (MDM) server in the portal. It doesn't have to be the actual name or URL of the Microsoft Intune server. 
+7. Upload your public key file and then save your changes. Then you can download the server token.  
 
-5. The **Add <ServerName>** dialog box opens, stating **Upload Your Public Key**. Select **Choose File…** to upload the .pem file, and then choose **Next**.
+### Best practices  
 
-6. Go to  **Deployment Programs** > **Device Enrollment Program** > **Manage Devices**.
-7. Under **Choose Devices By**, specify how devices are identified:
-    - **Serial Number**
-    - **Order Number**
-    - **Upload CSV File**.
+While you're in the Apple portal, you can also apply device filters and assign devices to the MDM server.   
 
-   ![Screenshot of specifying choose devices by serial number, setting choose action as Assign to server and selecting the server name.](./media/device-enrollment-program-enroll-macos/enrollment-program-token-specify-serial.png)
+   * Apply filters: To filter devices before assigning them to your MDM server, go to **Devices** > **Filter**. You can filter devices by:  
 
-8. For **Choose Action**, choose **Assign to Server**, choose the <ServerName> specified for Microsoft Intune, and then choose **OK**. The Apple portal assigns the specified devices to the Intune server for management and then displays **Assignment Complete**.
+        * Device management    
+        * Source  
+        * Order number 
+        * Device type  
+        * Storage size  
+
+   * Bulk assign devices: You can assign all eligible devices to your new MDM servers at the same time.     
+        1. Go to **Devices** > **All Devices** or select the devices you want to assign. 
+        2. Select **Edit MDM Server**.  
+        3. Select the MDM server you want to use. 
+        4. Select **Continue**. 
+        5. When prompted to, confirm your changes. A notification appears to confirm that the devices have been assigned to the new MDM server.  
+
+The Apple portal keeps track of your activity and changes. Select **Activity** to view assignment results and download logs.   
 
 ### Step 3. Save the Apple ID used to create this token
 
-In the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), provide the Apple ID for future reference.
+Return to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and enter your Apple ID so that you have record of it for future reference. 
 
 ![Screenshot of specifying the Apple ID used to create the enrollment program token and browsing to the enrollment program token.](./media/device-enrollment-program-enroll-ios/image03.png)