what’s new in managing apple devices...and deployment lab frameworks lab d tuesday 12:00pm...
Post on 31-May-2020
5 Views
Preview:
TRANSCRIPT
© 2015 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.
#WWDC15
What’s New in Managing Apple Devices
Distribution
Session 301
Todd Fernandez Senior Manager, Device Management
Configuration ProfilesSupervisionDevice Enrollment ProgramVolume Purchase ProgramApple IDs for Students
Enrollment Distribution ToolsManagement
Enrollment
Four-hour turnaround timefor iOS device replacements
Enrollment optimizationAccount creationPassword policiesAutomated enrollmentSetup Assistant
Device Enrollment ProgramEnrollment optimization
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 DEP Settings
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2DEP Settings
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2
3 TokenUpdate (AwaitingConfiguration)
DEP Settings
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2
3
4Commands
Configuration Profiles
TokenUpdate (AwaitingConfiguration)
DEP Settings
Device Enrollment ProgramEnrollment optimization
MDM Server
Device Enrollment Program
iOS Device or Mac
Exit Setup Assistant
await_device_configured
1 2
3
4Commands
Configuration Profiles
5DeviceConfigured
TokenUpdate (AwaitingConfiguration)
DEP Settings
Device Enrollment ProgramAccount creation
Prevent user account creationSet passcode policyCreate standard user accountCreate admin account• Optionally hidden
Configured using SetupConfiguration command
Device Enrollment ProgramAutomated enrollment
Device Enrollment ProgramAutomated enrollment
iOS Device
Device Enrollment Program
Configurator Station
Setup Assistant Apple Configurator
Device Enrollment ProgramAutomated enrollment
iOS Device
Device Enrollment Program
Configurator Station
Setup Assistant Apple Configurator
DEP Settings 1
Device Enrollment ProgramAutomated enrollment
iOS Device
Device Enrollment Program
Configurator Station
Setup Assistant 2 Apple Configurator
DEP Settings 1
Device Enrollment ProgramAutomated enrollment
iOS Device
Device Enrollment Program
Configurator Station
Setup Assistant
3
2 Apple Configurator
DEP Settings 1
Device Enrollment ProgramConfigure Setup Assistant
Device Enrollment ProgramConfigure Setup Assistant
Touch ID Apple Pay Zoom
Device Enrollment ProgramConfigure Setup Assistant
Touch ID Apple Pay Zoom Android Migration
Device Enrollment ProgramMDMServiceConfig
Equivalent to Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url• dep_anchor_certs_url• trust_profile_url
Device Enrollment ProgramMDMServiceConfig
Equivalent to Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url• dep_anchor_certs_url• trust_profile_url
Profile Manager has implementedConfigurator now supports
Enrollment Distribution ToolsManagement
Distribution
DistributionApp types
DistributionApp types
App Store Business-to-Business Ad-hocEnterprise
DistributionApp types
App Store Business-to-Business Ad-hocEnterprise
DistributionDelivery methods
App Store iTunes Xcode
AppleConfigurator
Mobile DeviceManagement
Over the Air
DistributionDelivery methods
App Store iTunes Xcode
AppleConfigurator
Mobile DeviceManagement
Over the Air
DistributionPurchasing methods
DistributionPurchasing methods
App Store
VPP Redemption Codes
VPP Managed Distribution
DistributionPurchasing methods
App Store
VPP Redemption Codes
VPP Managed Distribution
VPP Managed Distribution
VPP Managed DistributionMultinational app assignment
VPP Managed DistributionMultinational app assignment
Purchase inVPP country
VPP Managed DistributionMultinational app assignment
Assign to any countrywhere app is sold
Purchase inVPP country
VPP Managed DistributionDevice app assignment: What’s different
No invitation processNo Apple ID required on deviceDoes not appear in user’s purchase historyInstallation and updates controlled by MDM serverNeed to buy app for each device
VPP Managed DistributionDevice app assignment: What’s different
No invitation processNo Apple ID required on deviceDoes not appear in user’s purchase historyInstallation and updates controlled by MDM serverNeed to buy app for each device
VPP Managed DistributionDevice app assignment: What’s different
No invitation processNo Apple ID required on deviceDoes not appear in user’s purchase historyInstallation and updates controlled by MDM serverNeed to buy app for each device
No Apple ID required on device!
VPP Managed DistributionDevice app assignment: What’s the same
PurchasingReassignableSmooth migration from user assignmentRequires MDM server or Apple Configurator
VPP Managed DistributionApp developers
Support device assignments• Opt in• Update receipt checking
Store app data in the cloud• iCloud Drive, CloudKit, KVS • Your own cloud-based storage solution
VPP Managed DistributionApp developers
Support device assignments• Opt in• Update receipt checking
Store app data in the cloud• iCloud Drive, CloudKit, KVS • Your own cloud-based storage solution
What's New in CloudKit Mission Tuesday 3:30PM
CloudKit Tips and Tricks Pacific Heights Thursday 4:30PM
DistributionOS X Server: Caching Server
Pre-heat cache of iCloud data on local networkData encrypted
iCloud Drive documentsCloudKit dataiCloud Photo Library photosOn-demand app resources
VPP Managed DistributionMDM developers
iTunes Store APIs to assign and revokeInstallApplication command to install appSupport assigning apps to devices and device groups
Designed for centralized app management workflows
VPP Managed DistributionMDM developers: InstallApplication
Installs app if not installedUpdates app if installed managedInstall fails if user installed unmanaged
For iOS device assignments, use the same Purchase Method as OS X
VPP Managed DistributionMDM developers: New iTunes Store APIs
manageVPPLicensesByAdamIdSrv
• Supersedes associateVPPLicenseWithVPPUserSrv and disassociateVPPLicenseWithVPPUserSrv APIs
• Bulk association and disassociation of a single asset to and from users or devices
getVPPAssetsSrv• returns assets owned by organization• includeLicenseCounts option
VPP Managed DistributionMDM developers: Updated iTunes Store API
VPPServiceConfigSrv• maxAssociateLicenseCount• maxDisassociateLicenseCount
VPP Managed DistributionMDM developers: Retry-after header
RFC 2616 sec 14.37May include with 503 Service Unavailable status to abusive clientsClients ignoring delay may be rejected or VPP account suspended
DistributionWhat’s new
Migrate user to device assignmentConvert unmanaged to managedInstall via MDM or Configurator
DistributionWhat’s more convenient
Migrate user to device assignment without reinstalling or losing user dataConvert unmanaged to managed without reinstalling or losing user dataInstall via MDM or Configurator when App Store disabled
DistributionChangeManagementState
InstallApplication command with ChangeManagementState = Managed Silent on supervised deviceUser accepts on unsupervised deviceManaged Open In considers app data managedInstalls app if uninstalled
DistributionEnterprise apps
New explicit user trust flow for appsPrevent users from trusting appsApps installed via MDM do not require explicit user trust
DistributionB2B apps
DistributionB2B apps
App Store App
DistributionB2B apps
App Store App Adam ID 123456789
DistributionB2B apps
App Store App B2B App
DistributionB2B apps
App Store App Deleted App Store AppB2B App
DemoEnrolling and distributing apps to Macs
Shruti GuptaDevice Management Engineer
Recap
Install passcode policy before user account createdCreate standard user accountCreate hidden admin accountAssign VPP apps to a device
Enrollment Distribution ToolsManagement
Management
What’s New in iOS 9EAS16 calendar improvements
Improved reliability• Creating meeting invitations from iOS• Creating and modifying exceptions
in recurring meetings• Handling all-day event time zones
AttachmentsPhysical locations
What’s New in iOS 9MDM commands and queries
Available Software UpdatesUpdate to latest iOS (DEP devices)• Including downloading and staging with later installation
DeviceInformation returns AwaitingConfigurationDeviceConfigured
InstallApplication: ChangeManagementState
What’s New in iOS 9Configuration profile payloads
Network Usage RulesOS X Server AccountMail: Mail DropSSO: Specify wildcards for URLPrefixMatchesVPN: Many new IKEv2 settingsRestrictions: many new settings
What’s New in iOS 9Configuration profile restrictions
Screen recordingTrust new enterprise app authorsTreat AirDrop as unmanaged destinationAutomatic app downloadsiCloud Photo LibraryKeyboard shortcutsModify device name, passcode, WallpaperNewsPair with Apple Watch
What’s New in iOS 9Configuration profile restrictions: deprecations
App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends
What’s New in iOS 9Configuration profile restrictions: deprecations
App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends
What’s New in OS X El CapitanMDM commands and queries
Available Software UpdatesInstall Software Update (DEP Macs)
DeviceInformation returns AwaitingConfiguration (and iTunesStoreAccountHash)SetupConfigurationDeviceConfigured
ActiveManagedUsers
What’s New in OS X El CapitanConfiguration profile payloads
Ethernet proxyLogin Window• Disable account migration during login
Restrictions• Use camera• iCloud documents and data• Use iCloud password for local accounts• Spotlight Suggestions
Security and Privacy• Send diagnostic and usage data to Apple
Enterprise Network Connectivity
Improvements to• Per-app VPN• Advanced Content Filtering• IPSec/IKEv2 mobility• VPN Plug-ins• VPN Settings UI
Enterprise Network Connectivity
Improvements to• Per-app VPN• Advanced Content Filtering• IPSec/IKEv2 mobility• VPN Plug-ins• VPN Settings UI
What’s New in Network Extension and VPN Nob Hill Friday 9:00AM
DemoManaging shared iOS devices
Shruti GuptaDevice Management Engineer
Recap
Disable changing device name, wallpaper, and passcode and installing appsAssign VPP app to iOS deviceInstall app via MDM while App Store disabled
Enrollment Distribution ToolsManagement
Tools
ToolsDEP and VPP Simulators
Simulate DEP and VPP servicesTest handling of service errors
Available for download on developer portalSupport new features
Apple Device Management Tools
Apple Device Management Tools
Profile Manager
Apple Device Management Tools
Profile Manager Apple Configurator
Apple ConfiguratorFeatures
Three workflowsSuperviseInstall apps using VPP redemption codesInstall profilesDatabase of devices, apps, and profiles
Apple Configurator 2
Apple Configurator 2
Apple Configurator 2
Apple Configurator 2Goals
Devices front and centerDiscrete tasksEasy automationMultiple stationsCompanion to DEP and MDM server
DemoApple Configurator 2
Enrique OsunaLead Engineer, Apple Configurator
Recap
Configure devices using Apple Configurator 2Install VPP appsCreate device groups using tagsUse a blueprint to create and replay custom set of actions on multiple devices
Recap
Configure devices using Apple Configurator 2Install VPP appsCreate device groups using tagsUse a blueprint to create and replay custom set of actions on multiple devices
Supporting the Enterprise with OS X Automation Nob Hill Thursday 1:30PM
Works off-network
Renaming Tokens
Suite of Automator actions
Complete app-handling workflow
Install VPP appsBlueprints
No device databaseCommand line tool
Scripting library
Device and task-centered UI
Caching Server
Works with DEP devices
VPP device assignments
Great companion to MDM server
Export and import supervising organizations
iCloud support
Powerful searching
Wallpaper Install personal apps
Tags
Rename
Enrollment Distribution ToolsManagement
SummaryAdministrators
Use DEP (wireless) or Configurator (wired) to enroll devices in MDMUse VPP Managed Distribution to distribute apps to devices or usersApple Configurator 2 Beta available now
SummaryDevelopers
App developers opt in for device assignments
Support VPP Managed Distribution device assignments• Documentation available now• New iTunes Store APIs in production
Support new features in iOS 9 and OS X El CapitanUse DEP and VPP simulators
Related Sessions
What's New in CloudKit Mission Tuesday 3:30PM
Transforming Enterprise Get Together Buena Vista Park Tuesday 6:00PM
Supporting the Enterprise with OS X Automation Nob Hill Thursday 1:30PM
CloudKit Tips and Tricks Pacific Heights Thursday 4:30PM
What’s New in Network Extension and VPN Nob Hill Friday 9:00AM
Related Labs
Education and Enterprise Development and Deployment Lab Frameworks Lab D Tuesday 12:00PM
Education and Enterprise Development and Deployment Lab Frameworks Lab D Thursday 12:00PM
Education and Enterprise Development and Deployment Lab Frameworks Lab C Friday 2:30PM
developer.apple.com/enterprise
Resources for Enterprisedeveloper.apple.com/enterprise
More Information
MDM DevelopersApple MDM Protocolhttps://developer.apple.com/downloads/index.action?name=Mobile%20Device%20Management%20Protocol%20Reference
Configuration Profile Referencehttp://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef
MDM Developer Forumhttps://devforums.apple.com/community/ios/mdmdev
More Information
AdministratorsiOS Deployment Referencehttp://help.apple.com/deployment/ios
OS X Deployment Referencehttp://help.apple.com/deployment/osx
Deployment Programs Helphttp://help.apple.com/deployment/programs
More Information
AdministratorsApple Configurator Helphttp://help.apple.com/configurator/mac
Profile Manager Helphttp://help.apple.com/profilemanager/mac
iPad in Business and Educationhttp://discussions.apple.com/community/ipad/ipad_in_business_and_education
iPhone in Business and Educationhttp://discussions.apple.com/community/iphone/iphone_in_business_and_education
top related