What’s New in Managing Apple Devices...and Deployment Lab Frameworks Lab D Tuesday 12:00PM Education and Enterprise Development and Deployment Lab Frameworks Lab D Thursday 12:00PM

© 2015 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.

#WWDC15

What’s New in Managing Apple Devices

Distribution

Session 301

Todd Fernandez Senior Manager, Device Management

Configuration ProfilesSupervisionDevice Enrollment ProgramVolume Purchase ProgramApple IDs for Students

Enrollment Distribution ToolsManagement

Enrollment

Four-hour turnaround timefor iOS device replacements

Enrollment optimizationAccount creationPassword policiesAutomated enrollmentSetup Assistant

Device Enrollment ProgramEnrollment optimization


MDM Server

Device Enrollment Program

iOS Device or Mac


MDM Server


iOS Device or Mac

await_device_configured

1 DEP Settings


MDM Server


iOS Device or Mac


1 2DEP Settings


MDM Server


iOS Device or Mac


1 2

3 TokenUpdate (AwaitingConfiguration)

DEP Settings


MDM Server


iOS Device or Mac


1 2

3

4Commands

Configuration Profiles

TokenUpdate (AwaitingConfiguration)

DEP Settings


MDM Server


iOS Device or Mac

Exit Setup Assistant


1 2

3

4Commands

Configuration Profiles

5DeviceConfigured

TokenUpdate (AwaitingConfiguration)

DEP Settings

Device Enrollment ProgramAccount creation

Prevent user account creationSet passcode policyCreate standard user accountCreate admin account• Optionally hidden

Configured using SetupConfiguration command

Device Enrollment ProgramAutomated enrollment


iOS Device


Configurator Station

Setup Assistant Apple Configurator


iOS Device



Setup Assistant Apple Configurator

DEP Settings 1


iOS Device



Setup Assistant 2 Apple Configurator

DEP Settings 1


iOS Device



Setup Assistant

3

2 Apple Configurator

DEP Settings 1

Device Enrollment ProgramConfigure Setup Assistant


Touch ID Apple Pay Zoom


Touch ID Apple Pay Zoom Android Migration

Device Enrollment ProgramMDMServiceConfig

Equivalent to Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url• dep_anchor_certs_url• trust_profile_url

Device Enrollment ProgramMDMServiceConfig

Equivalent to Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url• dep_anchor_certs_url• trust_profile_url

Profile Manager has implementedConfigurator now supports


Distribution

DistributionApp types


App Store Business-to-Business Ad-hocEnterprise


App Store Business-to-Business Ad-hocEnterprise

DistributionDelivery methods

App Store iTunes Xcode

AppleConfigurator

Mobile DeviceManagement

Over the Air

DistributionDelivery methods

App Store iTunes Xcode

AppleConfigurator

Mobile DeviceManagement

Over the Air

DistributionPurchasing methods


App Store

VPP Redemption Codes

VPP Managed Distribution


App Store

VPP Redemption Codes



VPP Managed DistributionMultinational app assignment


Purchase inVPP country


Assign to any countrywhere app is sold

Purchase inVPP country

VPP Managed DistributionDevice app assignment: What’s different

No invitation processNo Apple ID required on deviceDoes not appear in user’s purchase historyInstallation and updates controlled by MDM serverNeed to buy app for each device





No Apple ID required on device!

VPP Managed DistributionDevice app assignment: What’s the same

PurchasingReassignableSmooth migration from user assignmentRequires MDM server or Apple Configurator

VPP Managed DistributionApp developers

Support device assignments• Opt in• Update receipt checking

Store app data in the cloud• iCloud Drive, CloudKit, KVS • Your own cloud-based storage solution

VPP Managed DistributionApp developers

Support device assignments• Opt in• Update receipt checking

Store app data in the cloud• iCloud Drive, CloudKit, KVS • Your own cloud-based storage solution

What's New in CloudKit Mission Tuesday 3:30PM

CloudKit Tips and Tricks Pacific Heights Thursday 4:30PM

DistributionOS X Server: Caching Server

Pre-heat cache of iCloud data on local networkData encrypted

iCloud Drive documentsCloudKit dataiCloud Photo Library photosOn-demand app resources

VPP Managed DistributionMDM developers

iTunes Store APIs to assign and revokeInstallApplication command to install appSupport assigning apps to devices and device groups

Designed for centralized app management workflows

VPP Managed DistributionMDM developers: InstallApplication

Installs app if not installedUpdates app if installed managedInstall fails if user installed unmanaged

For iOS device assignments, use the same Purchase Method as OS X

VPP Managed DistributionMDM developers: New iTunes Store APIs

manageVPPLicensesByAdamIdSrv

• Supersedes associateVPPLicenseWithVPPUserSrv and disassociateVPPLicenseWithVPPUserSrv APIs

• Bulk association and disassociation of a single asset to and from users or devices

getVPPAssetsSrv• returns assets owned by organization• includeLicenseCounts option

VPP Managed DistributionMDM developers: Updated iTunes Store API

VPPServiceConfigSrv• maxAssociateLicenseCount• maxDisassociateLicenseCount

VPP Managed DistributionMDM developers: Retry-after header

RFC 2616 sec 14.37May include with 503 Service Unavailable status to abusive clientsClients ignoring delay may be rejected or VPP account suspended

DistributionWhat’s new

Migrate user to device assignmentConvert unmanaged to managedInstall via MDM or Configurator

DistributionWhat’s more convenient

Migrate user to device assignment without reinstalling or losing user dataConvert unmanaged to managed without reinstalling or losing user dataInstall via MDM or Configurator when App Store disabled

DistributionChangeManagementState

InstallApplication command with ChangeManagementState = Managed Silent on supervised deviceUser accepts on unsupervised deviceManaged Open In considers app data managedInstalls app if uninstalled

DistributionEnterprise apps

New explicit user trust flow for appsPrevent users from trusting appsApps installed via MDM do not require explicit user trust

DistributionB2B apps


App Store App


App Store App Adam ID 123456789


App Store App B2B App


App Store App Deleted App Store AppB2B App

DemoEnrolling and distributing apps to Macs

Shruti GuptaDevice Management Engineer

Recap

Install passcode policy before user account createdCreate standard user accountCreate hidden admin accountAssign VPP apps to a device


Management

What’s New in iOS 9EAS16 calendar improvements

Improved reliability• Creating meeting invitations from iOS• Creating and modifying exceptions

in recurring meetings• Handling all-day event time zones

AttachmentsPhysical locations

What’s New in iOS 9MDM commands and queries

Available Software UpdatesUpdate to latest iOS (DEP devices)• Including downloading and staging with later installation

DeviceInformation returns AwaitingConfigurationDeviceConfigured

InstallApplication: ChangeManagementState

What’s New in iOS 9Configuration profile payloads

Network Usage RulesOS X Server AccountMail: Mail DropSSO: Specify wildcards for URLPrefixMatchesVPN: Many new IKEv2 settingsRestrictions: many new settings

What’s New in iOS 9Configuration profile restrictions

Screen recordingTrust new enterprise app authorsTreat AirDrop as unmanaged destinationAutomatic app downloadsiCloud Photo LibraryKeyboard shortcutsModify device name, passcode, WallpaperNewsPair with Apple Watch

What’s New in iOS 9Configuration profile restrictions: deprecations

App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends

What’s New in iOS 9Configuration profile restrictions: deprecations

App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends

What’s New in OS X El CapitanMDM commands and queries

Available Software UpdatesInstall Software Update (DEP Macs)

DeviceInformation returns AwaitingConfiguration (and iTunesStoreAccountHash)SetupConfigurationDeviceConfigured

ActiveManagedUsers

What’s New in OS X El CapitanConfiguration profile payloads

Ethernet proxyLogin Window• Disable account migration during login

Restrictions• Use camera• iCloud documents and data• Use iCloud password for local accounts• Spotlight Suggestions

Security and Privacy• Send diagnostic and usage data to Apple

Enterprise Network Connectivity

Improvements to• Per-app VPN• Advanced Content Filtering• IPSec/IKEv2 mobility• VPN Plug-ins• VPN Settings UI

Enterprise Network Connectivity

Improvements to• Per-app VPN• Advanced Content Filtering• IPSec/IKEv2 mobility• VPN Plug-ins• VPN Settings UI

What’s New in Network Extension and VPN Nob Hill Friday 9:00AM

DemoManaging shared iOS devices

Shruti GuptaDevice Management Engineer

Recap

Disable changing device name, wallpaper, and passcode and installing appsAssign VPP app to iOS deviceInstall app via MDM while App Store disabled


Tools

ToolsDEP and VPP Simulators

Simulate DEP and VPP servicesTest handling of service errors

Available for download on developer portalSupport new features

Apple Device Management Tools


Profile Manager


Profile Manager Apple Configurator

Apple ConfiguratorFeatures

Three workflowsSuperviseInstall apps using VPP redemption codesInstall profilesDatabase of devices, apps, and profiles

Apple Configurator 2



Apple Configurator 2Goals

Devices front and centerDiscrete tasksEasy automationMultiple stationsCompanion to DEP and MDM server

DemoApple Configurator 2

Enrique OsunaLead Engineer, Apple Configurator

Recap

Configure devices using Apple Configurator 2Install VPP appsCreate device groups using tagsUse a blueprint to create and replay custom set of actions on multiple devices

Recap

Configure devices using Apple Configurator 2Install VPP appsCreate device groups using tagsUse a blueprint to create and replay custom set of actions on multiple devices

Supporting the Enterprise with OS X Automation Nob Hill Thursday 1:30PM

Works off-network

Renaming Tokens

Suite of Automator actions

Complete app-handling workflow

Install VPP appsBlueprints

No device databaseCommand line tool

Scripting library

Device and task-centered UI

Caching Server

Works with DEP devices

VPP device assignments

Great companion to MDM server

Export and import supervising organizations

iCloud support

Powerful searching

Wallpaper Install personal apps

Tags

Rename


SummaryAdministrators

Use DEP (wireless) or Configurator (wired) to enroll devices in MDMUse VPP Managed Distribution to distribute apps to devices or usersApple Configurator 2 Beta available now

SummaryDevelopers

App developers opt in for device assignments

Support VPP Managed Distribution device assignments• Documentation available now• New iTunes Store APIs in production

Support new features in iOS 9 and OS X El CapitanUse DEP and VPP simulators

Related Sessions

What's New in CloudKit Mission Tuesday 3:30PM

Transforming Enterprise Get Together Buena Vista Park Tuesday 6:00PM

Supporting the Enterprise with OS X Automation Nob Hill Thursday 1:30PM

CloudKit Tips and Tricks Pacific Heights Thursday 4:30PM

What’s New in Network Extension and VPN Nob Hill Friday 9:00AM

Related Labs

Education and Enterprise Development and Deployment Lab Frameworks Lab D Tuesday 12:00PM

Education and Enterprise Development and Deployment Lab Frameworks Lab D Thursday 12:00PM

Education and Enterprise Development and Deployment Lab Frameworks Lab C Friday 2:30PM

developer.apple.com/enterprise

Resources for Enterprisedeveloper.apple.com/enterprise

http://developer.apple.com/enterprise

More Information

MDM DevelopersApple MDM Protocolhttps://developer.apple.com/downloads/index.action?name=Mobile%20Device%20Management%20Protocol%20Reference

Configuration Profile Referencehttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef

MDM Developer Forumhttps://devforums.apple.com/community/ios/mdmdev

More Information

AdministratorsiOS Deployment Referencehttp://help.apple.com/deployment/ios

OS X Deployment Referencehttp://help.apple.com/deployment/osx

Deployment Programs Helphttp://help.apple.com/deployment/programs

http://help.apple.com/deployment/programs

More Information

AdministratorsApple Configurator Helphttp://help.apple.com/configurator/mac

Profile Manager Helphttp://help.apple.com/profilemanager/mac

iPad in Business and Educationhttp://discussions.apple.com/community/ipad/ipad_in_business_and_education

iPhone in Business and Educationhttp://discussions.apple.com/community/iphone/iphone_in_business_and_education

Documents

What’s New in Managing Apple Devices...and Deployment Lab Frameworks Lab D Tuesday 12:00PM Education and Enterprise Development and Deployment Lab Frameworks Lab D Thursday 12:00PM