enabling iphones & ipads in the enterprise · maas360 white paper > enabling iphones &...

MaaS360 White Paper > Enabling iPhones & iPads in the Enterprise

Enabling iPhones & iPads in the Enterprise

http://www.maas360.com/

http://www.maas360.com/resources/white-papers/

2


Copyright © 2012 Fiberlink Communications Corporation. All rights reserved.

This document contains proprietary and confidential information of Fiberlink. No part of this document may be

used, disclosed, distributed, transmitted, stored in any retrieval system, copied or reproduced in any way or form,

including but not limited to photocopy, photographic, magnetic, electronic or other record, without the prior written

permission of Fiberlink.

This document is provided for informational purposes only and the information herein is subject to change without

notice. Please report any errors to Fiberlink. Fiberlink will not provide any warranties covering this information and

specifically disclaims any liability in connection with this document.

This document is subject to the terms of the MaaSters Partner Program Agreement. Fiberlink reserves the right to

administer this Program at its discretion. Fiberlink may make any of the benefits in this document available to any

MaaSters Partner Program Participant, and/or withhold any benefits from any Program Participant without obligation

to offer or withhold such benefits to or from any other Program Participant, pursuant to the MaaSters Partner

Agreement terms and conditions.

Fiberlink, MaaS360, associated logos, and the names of the products and services of Fiberlink are trademarks or

service marks of Fiberlink and may be registered in certain jurisdictions. All other names, marks, brands, logos, and

symbols may be trademarks or registered trademarks or service marks of their respective owners. Use of any or all of

the above is subject to the specific terms and conditions of the Agreement.

Copyright © 2012 Fiberlink, 1787 Sentry Parkway West, Building Eighteen, Suite 200, Blue Bell, PA 19422.

All rights reserved.



3


Table of Contents

Overview ....................................................................................................................4

1. Set Up ActiveSync on Your Exchange Server ........................................................................5

2. Create Exchange ActiveSync Mailbox Policies ......................................................................5

3. Activate a Device with Exchange ActiveSync .......................................................................6

4. Verify that the iPhone is Communicating with the Exchange Server ...........................................6

Additional Resources ......................................................................................................7

Conclusion ..................................................................................................................7



4


OverviewWe’re in the midst of a Bring-Your-Own-Device (BYOD) tsunami, and your employees are clamoring to use their

shiny new iPhones and iPads to access your corporate systems. It can be a source of great competitive advantage

by allowing your employees to stay productive and happy accessing corporate data 24x7x365, however, it can also

quickly become a headache to manage and secure the flood of these new mobile devices.

If you are like most companies, the immediate need is to get complete visibility into the personally- and corporately-

owned devices that are entering the enterprise, and quickly get them configured for enterprise access. At a minimum,

you need to enforce device passwords and encryption policy, and have the ability to wipe corporate data if the device

is lost or the employee leaves.

This white paper introduces you to four simple steps for onboarding your iPhones & iPads to your corporate Microsoft

Exchange server.



5


1. Set Up ActiveSync on Your Exchange ServerExchange ActiveSync is a Microsoft Exchange synchronization protocol that’s optimized to work with high-latency and low-bandwidth networks. The protocol, based on HTTP and XML, lets mobile devices access an organization’s information on a server that’s running Microsoft Exchange. Exchange ActiveSync enables mobile device users to access their email, calendar, contacts and tasks, and to continue to be able to access this information while they’re working offline.

By default, when you install the Client Access server role on a computer that’s running Microsoft Exchange Server 2010, you enable Microsoft Exchange ActiveSync. Exchange ActiveSync lets you synchronize an iPhone or iPad with your Exchange 2010 mailbox.

Click the following links for more detailed information about Exchange ActiveSync:

Microsoft: http://technet.microsoft.com/en-us/library/aa998357.aspx

Apple iPhone: www.apple.com/iphone/business/integration/#exchange

Apple iPad: www.apple.com/ipad/business/integration/#exchange

2. Create Exchange ActiveSync Mailbox PoliciesExchange Server allows you to assign mobile device security policies on a per-user or global basis. These policies are called Exchange ActiveSync Mailbox Policies. Some of the most important policies include requiring and enforcing basic security precautions. This includes requiring a strong password, password expiration, auto-lock and auto-wipe if a specific number of failures occur.

You will also want to enforce that local encryption is enabled and have the ability to wipe the device remotely.

For detailed information, click the following link: http://technet.microsoft.com/en-us/library/bb123783.aspx



6


3. Activate a Device with Exchange ActiveSyncTo receive corporate email, contacts and calendar data on your iPhone or iPad you must set up the device to talk to your Exchange Server. There are a few options you can choose from, including the following: iPhone Configuration Utility, Exchange ActiveSync (Outlook Web App (OWA) for remote wipe) and activation by the users themselves.

The iPhone Configuration Utility lets you create, encrypt and install configuration profiles easily for both iPhones and iPads. You can also track and install provisioning profiles and authorized applications, as well as capturing device information including console logs. You can download this from Apple’s website along with documentation for business integration.

Download the iPhone Configuration Utility here: www.apple.com/support/iphone/enterprise/

Page 29 of this document discusses the iPhone Configuration Utility: http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf

With Exchange ActiveSync you already have the necessary services in place. OWA offers a number of actions for devices using ActiveSync, like removing the device, wiping all data on the device, displaying a recovery password and retrieving the log file. The iPhone and iPad supports the Remote Wipe. This easily allows the user to wipe a device that may have been lost or stolen, and also allows the IT admin to take action.

For a guide to deploying devices with Exchange ActiveSync, click the following link (page 16 explains Microsoft Exchange): http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf

Configuring iPhones and iPads for access to corporate services is simple for users. Deliver the iPhone or iPad directly to their desks and users can manually enter settings or install a configuration file to set up the device automatically and ensure that their devices are secure and ready for business.

For a self-service set up, click here: http://support.apple.com/kb/HT2480

4. Verify that the iPhone or iPad is Communicating with the Exchange ServerThere are a few different easy-to-do verification steps. You may find that any of the following works for your situation:

• You can check the Exchange Server under the user account, mobile devices to see the device listed for that user.

• You can have the user login to OWA, click Options > Mobile Devices and they should see the device in the

list. Directly from the iPhone or iPad itself, the user will be prompted to confirm their sync, mail, calendar,

and/or contacts.

Congratulations! You’re finished.



7


Additional ResourcesThere are many good references to use for the iPhone and iPad in the business environment. Among them

are the following:

General information about iPhone for business: www.apple.com/iphone/business/

General information about iPad for business: www.apple.com/ipad/business/

More about Exchange: www.apple.com/iphone/business/integration/#exchange

ConclusionThe challenge to manage and secure iPhones, iPads and the flood of new mobile devices in the Enterprise is going to continue to grow for most organizations. The process of manually onboarding new mobile devices is not scalable, demanding scarce resources you can hardly afford.

The MaaS360 platform provides true software-as-a-service (SaaS) that delivers instant enterprise mobile device (MDM), application (MAM), document and expense management−all from a single screen.

It is the fastest and most comprehensive way to configure devices for enterprise access and secure corporate data on smartphones and tablets.

Deployment is quick. In just a few clicks, IT administrators can start enrolling devices and immediately manage the entire mobile device lifecycle−from enrollment to enterprise integration, configuration and management, monitoring and security, support, and analytics and reporting.

Check us out today at www.maas360.com and start your free 30-day trial of MaaS360.

All brands and their products, featured or referred to within this document, are trademarks or registered trademarks of their respective holders and should be noted as such.

For More InformationTo learn more about our technology and services visit www.maaS360.com.1787 Sentry Parkway West, Building 18, Suite 200 | Blue Bell, PA 19422Phone 215.664.1600 | Fax 215.664.1601 | [email protected]

WP_201209_0038



enabling iphones & ipads in the enterprise · maas360 white paper > enabling iphones &...

Documents