> Source: [sk170415](https://support.checkpoint.com/results/sk/sk170415)

# sk170415 - Capsule Connect iOS MDM CE in Intune

| Property | Value |
|----------|-------|
| Solution ID | sk170415 |
| Date Created | 2020-11-10 |
| Last Modified | 2021-05-05 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | iOS |
| Platform | Mobile Devices |

## Solution

First you need to enable and configure the MDM CE support on the security gateway.  
Follow [sk98201 - MDM Cooperative Enforcement for Mobile clients](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98201) and configure the integration with your MDM vendor.  

In order to configure the client for its role in the MDM CE feature, you need to add an app configuration policy for our Capsule Connect app with the special DeviceId key that will be used when the device authenticates against our Security Gateway. (The Security Gateway will then use this device id to query its compliance against the MDM).  

Before you begin this article, follow the instructions in [sk170298 - Capsule Connect - MDM configuration, including Per-App VPN and Zero-touch configuration](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170298) on how to set up the MDM configuration for Capsule Connect in Intune.  

### Step-by-step guide

1. Enter Apps:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_1202011101141351.png)
2. Enter App Configuration Policies:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_2202011101142322.png)
3. Add a new App Configuration Policy:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_3202011101143323.png)
4. Setup config for Capsule Connect:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_4202011101144424.png)
5. Select the app from the iOS store app:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_5202011101146145.png)
6. Add the configuration key **DeviceId** with value {{deviceid}} as shown below (notice both key and value are case-sensitive):  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_6202011101147136.png)
7. Review and create:  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_Step7202011221537121.png)
8. Set the compliance policy for these devices (Devices-\>Compliance Policy):  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk170415/sk170415_8202011101149438.png)

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content