Enterprise In House Certificate Life Extended!

Your rating: None (2 votes)

UPDATE: It turns out that this expiration extension does not actually extend the life-time of individual distribution profiles. Please see the comments below this article for more details.

I discovered this today and figured it was worth sharing with the Enterprise iOS community because it has such a profound impact on Enterprise app deployment strategies...

If you have ever dealt with iOS Enterprise In House distribution, you have undoubtably had to deal with the dreaded "Provisioning Profile Is About To Expire" message that appears on user devices every day for 30 days until the expiring profile is removed or the expiration date lapses.

I was pleased to find out today that Apple has changed the life of the underlying iOS Enterprise Distribution Certificate expiration date from one year to three years! Laughing out loud

This means you only have to deal with this (nightmare) every three years instead of every one year.

Practically speaking, this means the recommended enterprise app update lifecycle (in which you have users update their apps and/or remove the old provisioning profile) changes from six months to 1.5 years; a much more reasonable timeframe.

It appears that Apple made this change at the beginning of 2013 or late 2012; either way it seems like this change has been made across all enterprise iOS Developer accounts.

Can you pre-configure an app before deployment?

arthurmzee's picture
No votes yet

Hello all!
I'm using Apple Configurator to deploy iPads with a third-party app installed as well.
After preparing the iPads in Apple Configurator, I have to touch each iPad in order to
configure the settings of the third party app.
Is there a way to pre-configure the settings of a third-party app before installing it
on an iOS device using Apple Configurator or MDM? If so, how do you do this?
Thanks in advance,
az

Microsoft Office Macro files on iPad

Alexanderre's picture
No votes yet

Hi there.
I have a request to find a way to use macro files (xldm for example) on iPad. Is there an app for that? Never heard of any, couldn't find such information in descriptions to either Quickoffice, Numbers or Office2.
Help please.

Thanks.

Details! Enterprise iOS Meetup in San Francisco on 1/31/13

Aaron Freimark's picture
No votes yet

Hello community!

Here are the details for the live, in-the-flesh Enterprise iOS meetup in San Francisco on Thursday, January 31. (I'll be in town at the MacIT Conference.)

When: Thursday 1/31 from 8-10 PM
Where: 83 Proof, 83 First Street, between Market & Mission
Who's Invited: All readers and contributors, present and future, of Enterprise iOS
Who's Buying: Tekserve!

When I started this sire two years ago I wasn't sure how long it would last. At that time, nobody had the job title "iOS Administrator." Now, we're over 20K unique visitors each month. Our Comparison of MDM Providers has been viewed over 220,000 times. And our forums receive a healthy number of questions and knowledgable answers.

I'm proud of how far we've come! Come help me celebrate, discuss the state of the technology, and directions to take the site in 2013.

Thanks to all of you who make the community what it is. Looking forward to seeing you on Thursday!

Aaron

Useful Apple Links

Your rating: None (1 vote)

Really Useful links from Apple Support!! - Everyone who admins Apple devices needs these!

Originally by ipadmike.com. Please edit this wiki page to keep it up to date.

VPP Program Links

Business To Business
Join: http://www.apple.com/business/vpp/
Support: https://ssl.apple.com/support/itunes/vpp/
E-Mail: vpp_b2b@apple.com

Education
Join: http://www.apple.com/education/volume-purchase-program/
Support: https://ssl.apple.com/support/itunes/vpp-edu/
E-Mail: vpp_edu@apple.com

Volume Purchase Program Education Store
http://volume.itunes.apple.com

Volume Purchase Program Overview
http://www.apple.com/education/volume-purchase-program/

Volume Purchase Program FAQ
http://www.apple.com/education/volume-purchase-program/faq.html

Apple Configurator: Using Volume Purchase Program (VPP) Redemption Codes
http://support.apple.com/kb/HT5188

iTunes Store Customer Service - Volume Purchase Program for Business customers
http://www.apple.com/support/itunes/vpp/contact.html

Apple Configurator Resources

Introduction and how to video
http://www.apple.com/education/resources/information-technology.html

Education Seminars and Events (Video Links)
https://edseminars.apple.com/seminars/index.php

About Apple Configurator 1.1
http://support.apple.com/kb/HT5339
About Apple Configurator 1.1.2
http://support.apple.com/kb/HT5461
About Apple Configurator 1.2
http://support.apple.com/kb/HT5487

Download Apple Configurator
http://itunes.apple.com/us/app/apple-configurator/id434433123?mt=12

Apple Configurator: Backing up and restoring data
http://support.apple.com/kb/HT5194

Apple Configurator Help
http://help.apple.com/configurator/mac/1.0/

Apple Configurator - Using VPP Help
http://support.apple.com/kb/HT5188

Apple Configurator - Coordinating Device Names
http://support.apple.com/kb/HT5185

iPhone Configuration Utility Links

iOS 5 Deployment Guide (the guide for iOS 6 hasn’t been released yet)
http://images.apple.com/education/docs/IOS_5_EducationDeployment_Guide.pdf

iPhone Configuration Utility 3.3 for Mac OS X
http://support.apple.com/kb/dl851

iPhone Configuration Utility 3.3 for Windows
http://support.apple.com/kb/dl926

iOS Deployment Resources
http://www.apple.com/iphone/business/resources/

iPhone Configuration Profile Reference
http://developer.apple.com/library/ios/#featuredarticles/iPhoneConfigura...

iPhone Configuration Utility Guide
http://developer.apple.com/library/ios/#featuredarticles/FA_iPhone_Confi...

iPhone in Business: Device Configuration Overview
http://images.apple.com/iphone/business/docs/iPhone_Device_Configuration...

iPhone OS: Enterprise Deployment Guide
http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf

iPhone Support: Enterprise
http://www.apple.com/support/iphone/enterprise/

For Additional Questions:
vpp_edu@apple.com

Include:

Contact name/phone number
School name
AppleID being used


1.800.275.2273 - AppleCare Consumer Line
1.800.800.2775 - AppleCare Education
1.866.752.7753 - AppleCare Enterprise Server Support
http://www.apple.com/server/resources/

iOS app developers for survey wanted

dirkho's picture
No votes yet

Dear Community,

Related to my master's thesis at University of Koblenz-Landau - Chair of Media and Service Management (http://www.uni-koblenz-landau.de/koblenz/fb4/institute/ifm/agkilian/home-en) - I carry out a survey among Apple iOS, Android and Facebook app developers.

I would be very happy if you would participate in my survey, which takes about 10 minutes.

Here is the link to the questionnaire (valid until 03.02.2013):

http://ww2.unipark.de/uc/kb_uni_koblenz_kilian_ls/b2fe/

Btw: Among all participants, we are raffling vouchers for Apple iTunes, Google Play, and Amazon with a total value of € 200!

Thank you for your support!

Kind regards,
Dirk Homscheid

Windows Domain password changed, but iOS wifi still works with old password

milesmet's picture
No votes yet

Hi,

We have the following network setup:
Windows 2003 & 2008 Domain, Exchange & AD servers.
Wireless running WPA2 Enterprise / 802.18, PEAP with AES across Cisco ISE with Certificate.

When a user is connected with an iPhone; pulling Exchange mail (with ActiveSync) & browsing the web changes his domain password on Windows based laptop/desktop, the iPhone Exchange email immediately prompts for a new password, but the wireless connection itself does not, it will after a reboot of device, re-enable of the wireless connection or fairly long extended period of time, this is obviously a security risk as outlined in post: http://enterpriseios.com/forum/topic/Exchange_Passwords_after_iOS_501_Up... - the reason for the new post is the difference in exchange mail prompting for new password, but wireless connection now.

Is this Apple iOS standard or is there a fix for this either on the Windows AD/Domain side or device config?

Resolution of conflicting restrictions or email settings

lorrin.ferdinand's picture
No votes yet

How and where does resolution of conflicting restrictions or multiple email settings take place?

In theory, the resolution could take place on an MDM server or on the device. So where does it take place? I have seen reference to a file called the ProfileTruth.plist. What do people know about this file and where is it generated?

thx

MDM for VPP, iTunes accounts, iBooks in large rollout

James.G's picture
No votes yet

Hi,

I am assisting with the rollout of a large number of iPads in several schools.

For the limited pilots we have done so far, we have used MacBooks as sync stations and one Apple ID per sync station. We have spreadsheets of VPP codes to comply with licensing, but they are essentially unused.

Ideally we would like to do installation and updating of apps over the air and gather reporting data, and as such want to use an MDM. I really like the idea that specific groups will get certain apps. However, i am seeing several roadblocks that are due to Apple's restrictions and the limitations of their API:

- how can we push apps and app updates without requiring the kids to confirm and enter an Apple ID and password?

- how can we get all of these student iPads to look the same post deployment so that the teachers have consistency? Essentially folders would need to be moved, etc.

- how to view iPads like with ARD?

- Even if we were to stick with the sync station model, the new EULA for iBooks doesn't let us use purchased iBooks on all of the same devices. Textbooks will be a major component of this project.

Thanks,

Pushing certificates with Airwatch to authenticate on Exchange and corporate websites

69431S's picture
No votes yet

Hello,

We are using Airwatch for ours iPad.
Users register to Airwatch with their MS Active Directory account. Airwatch pushes a X509 Certificate (based on the user account and issued by our MS PKI) on the device.

We have two use cases :
- users access email via MS Exchange Activ Sync : authentication is done using MS Active Directory user/password
- users access extranet web applications : authentication is done by CA SiteMinder using the iPad X509 certificate

If the AD password expires, users don't have the possibility to change it with the iPad. They need to connect to corporate network on the LAN with their desktop.

I have several questions

1) Can we use the certificate to authenticate on Exchange?
What we need to do on Exchange, on Airwatch (if necessary) and on the iPad?

2) Can we use the fisrt certificate pushed by Airwatch or we need to issue another one for Exchange with specific caracteristics?

Thanks for your help
Regards
Laurent

What's the best MDM (in Germany)?

AKramer's picture
No votes yet

Hi,

we are a company with 150 blackberrys and 50 ipads. We are searching for a mdm for our global company. We have the solution airwatch and famoc but the support for airwatch is in germany very bad. The next hting is that famoc is good but the handling is very complex.

With famoc can we manage blackberrys and ipads.

What is the best solution currently?

MobileIron or an antohter MDM solution.

Thanks for your help

Kind regards
Andre

EDA annual mobile IT integration survey with Ryan Faas

No votes yet

Hello EnterpriseiOS.com Professionals,

The Enterprise Device Alliance is conducting its annual Fall survey of IT professionals at http://www.surveymonkey.com/s/B8HQV6D.

As always, we will share the results with the community.

This year, we're collaborating with Ryan Faas, a veteran consultant and journalist for Computerworld, to develop a survey that will discover how the pervasiveness of mobile devices and non-Windows systems has affected IT management in large organizations. Your experiences and opinions, collected in these survey results, can influence product development in solution providers and decision-making by enterprise IT management.

The survey is comprehensive and thorough. To thank you for your contribution we will raffle one $50 gift certificate for every 100 respondents. We will, of course, provide you a copy of the results. Please make a difference and give us your thoughts.

Please take the Survey here: http://www.surveymonkey.com/s/B8HQV6D

On December 12 at 2 pm ET/11 am PT. Ryan Faas will discuss the survey results with me, T. Reid Lewis, president of the Enterprise Device Alliance and co-founder of GroupLogic. This webcast will explore the results in detail, offering examples of how other companies are tackling the challenges presented by mobile device management.

Sign up for the Webcast here: https://centrify.webex.com/centrify/onstage/g.php?t=a&d=828848995

Questions? Write to us at info@enterprisedevicealliance.org For more information and past survey results, visit www.enterprisedevicealliance.org.

Thank you on behalf of the members of the Enterprise Device Alliance!

- Reid

T. Reid Lewis
Co-Founder
GroupLogic, Inc.
http://www.grouplogic.com/

Creators and publishers of:
activEcho: File Sharing and Syncing for Enterprise http://www.grouplogic.com/activecho
mobilEcho: Mobile File Management for iPhone & iPad http://www.grouplogic.com/mobilecho
ArchiveConnect: Macintosh integration for file archiving solutions http://www.grouplogic.com/archiveconnect
ExtremeZ-IP: Macintosh file & print server for Windows http://www.grouplogic.com/extremez-ip
MassTransit: automated file transfer solution for Windows & Macintosh http://www.grouplogic.com/masstransit

Pushing large files to many iPads at once

nfusee's picture
No votes yet

Hello,

I am new here but have a problem I am sure others have encountered or will encounter....so I wanted to see if anyone had any other suggestions.

We have the need to push a 500 MB video file to about 50 iPads as quick as possible. These iPads will be on a plane, traveling home. So, if it is a physical device using usb it must have a small footprint. We can create our own WiFi segment on the plane, however my testing below will show the issues there.

Testing the iPad2 and it's Wifi capabilites I have come to the conclusion that max transfer rate on the device itself is about 38 Mbps. I tested on a network that has 200 MB of bandwidth and tested with multiple iPads. So, if you have a 500 MB file you want to move to the iPad via WiFi it will take 105 seconds or one minute and 45 seconds. Here in lies the problem.....if you need to get 50 iPads that file..that download stream is not autonomous. Every iPad you join will denegrate that transfer speed and once you join 10 or so the transfer will take much too long.

If you had enough bandwidth for 10 iPads to join and all get thier own 38 mbps of bandwidth...why can you not tranfer to all 10 iPads in one minute and 45 seconds?

Thanks for any thoughts on this....

About the security content of Apple TV 5.1.1

No votes yet

See the details here: http://support.apple.com/kb/HT5598

Free AppStore and Enterprise App Push by SimpleMDM

No votes yet

Hey all!

We just wanted to let you know about a few new updates that we have made to SimpleMDM, a free iOS-only Mobile Device Management solution. SimpleMDM is designed to allow you to quickly and easily configure iOS devices with essential configurations such as WiFi and Email, and now, push Apps!

To learn about all of the capabilities of SimpleMDM, please visit http://www.simplemdm.com.

This update allows a SimpleMDM administrator to:

  • Select iTunes AppStore apps to be pushed to managed devices
  • Over-the-air deploy In-house Enterprise iOS apps, with automatic provisioning profile update handling
  • Effectively manage deployment of apps by groups of devices

Read more about how it works here: SimpleMDM App Deployment

The feature is free addition to SimpleMDM, and you can have an account set up and configured in minutes.

Note that paid AppStore apps (via VPP) are not yet supported, though the feature is road-mapped (let us know if this would be a valuable addition to your organization).

We hope you enjoy it, and please feel free to ask any questions in the comments below.

Best,
Matt Vlasach

About This Site

  • Enterprise iOS is a community for administrators of the iPad, iPhone, and related devices. All content is available to browse. We encourage you to create an account to submit stories, edit wiki pages, and post to our forum.

Comparison of MDM Providers

Recent Activity

Who's New