Apple Global Service Exchange (GSX) allows administrators to look up device details related to the display model name, the device purchase and warranty status directly from the UEM console.
If any devices in an organization group are missing a display model name, then a time scheduler runs periodically to search and update these names using the GSX information that was configured for the devices at that organization group level.
Only authorized Apple employees or organizations that have registered with Apple’s Self-Servicing Account Program can access GSX information.
Before you can integrate your deployment, you must create an Apple GSX account. To apply for a GSX account, you must have a service contract with Apple. Contact your Apple Account Executive to learn more about GSX.
To apply for a GSX account, visit http://www.apple.com/support/programs/ssa/.
To integrate AppleCare GSX with your Workspace ONE UEM deployment, you must first obtain an Apple certificates and convert them to .p12 format.
For more information, see Obtain an Apple Certificate to Integrate AppleCare GSX.
Once you have obtained and configured an Apple Certificate, you must upload the certificate to the UEM console and configure your AppleCare instance.
For more information, see Configure AppleCare GSX in the UEM console.
To integrate AppleCare GSX with your Workspace ONE UEM deployment, you must first obtain an Apple certificate and convert them to .p12 format.
Generate a certificate signing request (CSR) using OpenSSL or Java Keytool.
Send the CSR and the following GSX account information to Apple to receive Apple certificates (.pem files).
GSX Sold-To account number
Primary IT contact name
Primary IT contact email
Primary IT contact phone number
Outgoing static IP address of the server that sends requests to GSX Production
If your environment is hosted on the AW SaaS, refer to https://support.air-watch.com/articles/115001662168 for the IP address. If the IP range for your environment is not listed, please open a support ticket to have our Network Operations team facilitate it.
Apple generates the Apple certificate(.pem) and returns a signed certificate and a chain certificate. For ease of use, rename the files “cert.pem” and “chain.pem” for use in subsequent steps.
You may also receive a file labeled “issuer” that is not needed for this process.
Convert the Apple certificates to .p12 format.
Create a .p12 file using the private key and Apple certificates by executing the following command:
sudo openssl pkcs12 -export -inkey privatekey.pem -in cert.pem -certfile chain.pem -out GSX_Cert.p12
The certificate saves as a .p12 file in the location you specified.
If you do not specify a path before the file name when running the conversion command, the file saves to your working directory.
Once you have obtained and configured an Apple Certificate, you must upload the certificate to the UEM console and configure your AppleCare instance.
Procedure
Navigate to Groups & Settings > All Settings > Devices & Users > Apple > AppleCare.
To configure a GSX connection with the UEM console, you must have a GSX account with manager-level access, access to web services, and access to coverage and warranty information.
Enter GSX settings including:
| Setting | Action |
|---|---|
| GSX User ID | Enter the account user ID. |
| GSX Password | Enter the account password. |
| Sold-to Account Number | Enter the 10-digit service account number. This account number can be found in the GSX portal at the bottom of the web page. |
| Time Zone | Use the drop-down menu to select the appropriate time zone. |
| Language | Use the drop-down menu to choose a language. |
Select Save to complete the integration with AppleCare.
Navigate to the List View, select a device, and use the More menu to find AppleCare information in the UEM console.
Navigate to Accounts > Administrators and pull the information from Details section.
In the Add/Edit Admin page, add the GSX User ID and click SAVE.
You can now make GSX API calls.
