---
title: Enrolling macOS device using Company portal
description: "## **Prerequisites** Before you start: - **Licensing:** The user must have a valid Intune or Microsoft 365 license with Intune included. - **macOS version:** macOS 10.15 (Catalina) or later recommended. - **Internet access:** The Mac needs outbound access to Microsoft endpoints. - **Apple…"
url: "https://techtron.co.za/docs/enrolling-macos-device-using-company-portal/"
updated: "2025-08-18"
category: Mac OS
---

# Enrolling macOS device using Company portal

## **Prerequisites**

Before you start:

- **Licensing:** The user must have a valid Intune or Microsoft 365 license with Intune included.
- **macOS version:** macOS 10.15 (Catalina) or later recommended.
- **Internet access:** The Mac needs outbound access to Microsoft endpoints.
- **Apple MDM Push Certificate:** Intune must already have an Apple MDM push certificate set up in the Microsoft Intune admin center.

---

## **Enable macOS Enrollment in Intune**

1. Sign in to **Microsoft Intune admin center**:
   https://endpoint.microsoft.com
2. Go to:
   **Devices** → **macOS** → **Enrollment** → **Apple MDM Push certificate**.
3. Ensure a certificate is already configured. If not:
   - Download the CSR from Intune.
   - Go to Apple Push Certificates Portal and sign in with an Apple ID.
   - Upload the CSR and download the `.pem` certificate.
   - Upload the `.pem` back to Intune.

---

## **Download Company Portal on the Mac**

1. On the Mac, open Safari and go to:
   https://portal.manage.microsoft.com
2. Sign in with the user’s **Microsoft 365 work account**.
3. It will prompt to download **Company Portal** for macOS. Install it.

---

## **Enroll the Mac**

1. Open **Company Portal** after installation.
2. Sign in with the user’s work account.
3. Follow the prompts:
   - **Grant required permissions** (Full Disk Access, Profiles, System Preferences).
   - **Download the management profile** when prompted.
   - Open **System Settings** → **Privacy & Security** → **Profiles** (on macOS Ventura+;
     on older versions it’s **System Preferences → Profiles**).
   - Click the downloaded profile and **Approve/Install**.
4. Go back to Company Portal → **Check device compliance**.

---

## **Verify Enrollment**

- In Intune portal:
  **Devices → macOS → All devices** → Check if the device appears.
- The device should show **Compliant** if it meets your compliance policies.