ios en la empresa

8/20/2019 IOS en La Empresa

1/87

iOS Reconnect the cord

Hello, I’m William Smith and a Solutions Architect for 318, Inc., a technology consultancy based in Santa Monica,

Calif.

Let’s talk about what we can do when we forego wireless on our iOS devices and reconnect the cord.

1 iOS - Reconnect the Cord.key - July 11, 2015


2/87

The nature of this presentation isn’t so much as “lessons learned” from the project I’ll be referencing—this isn’t a case

study—but rather “nifty things I learned” while working on this project. I’ll also suggest some items for you to add to

your toolkit.



3/87

1:1 iPad

Initiative• PreK-12• 40,000 students• 5,000 faculty

This past year I’ve been on hiatus from my normal duties as a consultant to assist with an iPad rollout project for a

large school district. During this past school year, we deployed about 30,000 iPads to students and teachers. By the

time the project is complete at the end of calendar year 2015, the district will have distributed nearly 45,000 iPads.



4/87

Deployment• Wi-Fi + DEP + MDM

• Symmetric multi-processing = Users

With this number of devices, the school district planned on using Apple’s Device Enrollment Program (DEP) and what I

like to call the power of symmetric multi-processing to wirelessly enroll and manage its devices with its MDM. In other

words, dozens or hundreds of users can set up their devices more e"ciently and economically using DEP than

someone doing it for them.



5/87

iOS 8• Automatically

downloading on devices

• Not caching on our servers

We deployed iPads to teachers before school started last September and then iOS 8 dropped two weeks before we

were to deploy our first student iPads. We’d planned for this. However, we noticed two things:

1) The 1.2 GB update was automatically downloading to iPads. That was OK.

2) Our OS X caching servers installed in each school weren’t caching the update.

This meant many devices were simultaneously downloading the update over the district’s Internet connection.

Looking ahead, one school’s deployment could bog down the network.



6/87

Manual

Upgrade• Apple Configurator• 16 Macs• 20 devices per

Mac• 25,000 devices• 7 business days

We had to control the iOS 8 upgrade. The only way to do that was use Apple Configurator, which cached the 1.2 GB

upgrade file to the Mac. The only way to use Apple Configurator was physically connect each device to a workstation

and update each one.

Device by device, box by box and palette by palette (10 devices per box and 27 boxes per palette), we upgraded

about 25,000 devices in 7 business days.



7/87

iPad

Finger• iPads power onautomatically

• Configuratordoesn’t powerthem off

• Saved 13 days

We hired professionals to upgrade our 25,000 iPads, which was the primary reason this sub-project took as little time

as it did. They had developed a little in-house Mac application that did something simple but extraordinary. It watched

Configurator and as it finished updating a device the app made a few simple quality control checks and then shut

down the iPad—powered it o#.

That little step shaved o# 15 seconds per iPad due to less handling (they never had to remove the iPad from thecardboard sleeve) and the time it takes to press and hold the power button and swipe the screen.

That’s more than 13 business days of time.



8/87

There was something to be said about what you can do when you bypass Wi-Fi and connect the cord. And some

things you simply can’t do over Wi-Fi. More and more as I participated in this project, I learned some really cool things

you can only do when you connect the cord to an iOS device.



9/87

! Text Input! Networking! Screen Recording! Console and logs! Command line tools

We’ll spend a little bit of time talking about the first few items here.

I’ll cover a few ways of entering text on your iPad apart from using the on-screen keyboard and how you can use that

to speed up preparing multiple iPads with the same information.

When MDM can’t talk to your iPad wirelessly, we’ll see how you can still connect it to your network and how it cansave you a lot of headaches. Then we’ll cover a Yosemite and iOS 8 feature for viewing your iPad’s screen on your

Mac and how you can use that for a documentation and support.

But I’ll spend more of our time talking about troubleshooting information we can get out of a device and ways of

sending commands via command line, which we can use for scripting.



10/87

Text Input

!""#$ &'( )*$"+,-.$/01--.-2+,34)0+55#/678/0,/1)

9,)):5;$?.@""A2B

If you’re preparing a half dozen or more iPads, let alone dozens, hundreds or thousands, just entering Apple ID

information is time-consuming, burdensome and a painful.

How would you like to have to type Apple IDs and passwords like this on the on-screen keyboard?



11/87

Text Input

!""#$ &'( )*$"+,-.$/01--.-2+,34)0+55#/678/0,/1)

9,)):5;$?.@""A2B

If you’re a touch typist, a more e"cient way to enter data on an iPad is using an external keyboard.



12/87

Text Input

C52.*$0+ D.;$< E$FG5,;<

HIJ/JJ

Something like this Logitech Wired Keyboard that plugs directly into the 30-pin or Lightning port on the iPad work very

well and it requires no additional power, cables or software. Once you plug it in, it’s immediately ready to type. Cost is

about $60.



13/87

Text Input

C.2+*-.-2 *5 KBL M,3$;, !


14/87

Text Input

With just this connector, you can use most any wired USB keyboards you may have around the o"ce such as the Dell

extended keyboards that come with most PCs.



15/87

Text Input

However, Apple USB keyboards won’t work. Why?

Every Apple keyboard is a USB hub and the Lightning port on an iPad doesn’t generate enough power to support

both keyboard input and hubs, whether anything is plugged in to them or not.



16/87

Text Input

So, how do we make Apple keyboards work?

The next item I suggest adding to your toolkit is a small powered USB hub. This Protonix USB 3.0 4-port hub sells on

amazon.com for $10.95. The cost of it plus Apple’s Lightning to USB Camera adapter is about $20 below the cost of

Logitech’s small wired keyboard.

When you add the hub, though, you now get the ability to do something really cool.



17/87

Text Input

You can eliminate the keyboard and replace it with a barcode scanner. This Esky brand scanner on amazon.com sells

for about $19.99 and you can spend up to a few hundred dollars per scanner depending on any additional features

you want.



18/87

Text InputM5


19/87

! Text Input! Networking! Screen Recording! Console and logs! Command line tools

That takes care of getting text into your iOS device. Next, let’s talk about networking.



20/87

Networking

Here’s the scenario: A user forgets his iPad passcode. After a few failed attempts, he disables his iPad for five

minutes. The user restarts his iPad thinking that’ll reset the Disabled message. It doesn’t. After disabling his iPad

again for 15 minutes, he comes to you to clear his passcode from your MDM server.

The problem this causes is it turns o! Wi-Fi. The Wi-Fi credentials are securely stored in the iPad’s keychain, which

can only be unlocked by entering the passcode. Catch 22. How do get into the iPad?

The o"cial solution is “you don’t—wipe the device.”

The o"cial uno"cial solution is to connect the iPad to a wired network and bypass Wi-Fi. I say “uno"cial” because

Apple doesn’t o#er this solution as a support method but it’s been in iOS at least since version 6. And it continues to

work up to the latest versions of iOS that I’ve personally tested.

20-1 iOS - Reconnect the Cord.key - July 11, 2015


21/87

Networking

Here’s the scenario: A user forgets his iPad passcode. After a few failed attempts, he disables his iPad for five

minutes. The user restarts his iPad thinking that’ll reset the Disabled message. It doesn’t. After disabling his iPad

again for 15 minutes, he comes to you to clear his passcode from your MDM server.

The problem this causes is it turns o! Wi-Fi. The Wi-Fi credentials are securely stored in the iPad’s keychain, which

can only be unlocked by entering the passcode. Catch 22. How do get into the iPad?

The o"cial solution is “you don’t—wipe the device.”

The o"cial uno"cial solution is to connect the iPad to a wired network and bypass Wi-Fi. I say “uno"cial” because

Apple doesn’t o#er this solution as a support method but it’s been in iOS at least since version 6. And it continues to

work up to the latest versions of iOS that I’ve personally tested.



22/87

Networking

Let’s go back to a couple of tools we’ve added to our toolkit:

$ Apple’s Lightning to USB Camera adapter

$ Powered USB hub

Let’s add a couple more items to our toolkit:

" An Apple USB Ethernet Adapter for $29.00

" Ethernet cable

How does this all fit together?

1. First, plug the Camera adapter into the iPad.

2. Plug the USB hub into the Camera adapter.

3. Be sure to plug the USB hub into power.

4. Connect the USB Ethernet cable into the hub.

5. Connect the Ethernet cable to the USB Ethernet adapter.

6. Finally plug the Ethernet cable into the wall.

Simple!



23/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



24/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



25/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



26/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



27/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



28/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



29/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



30/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



31/87

Networking



$ Powered USB hub



" Ethernet cable








Simple!



32/87

Networking

iPad to

USB Camera Adapter toUSB hub toUSB Ethernet

Adapter toEthernet cable toEthernet port

It sounds pretty convoluted… and it is!

What does this do!? Remember, the Lightning port on the iPad can’t power much more than a simple keyboard. So,

we put a powered USB hub in mix and then connect this to a USB to Ethernet adapter, which connects things to

Ethernet networks. The USB hub is not only supplying power to this chain of adapters but also passing network tra"c

from the network port in your wall to the iPad.



33/87

Networking

10.1.28.100

• Clear passcode• Clear restrictions• Wipe• Profit!

The end result is we’ve now put our iPad back on the network. It automatically obtains an IP address and we can

send it remote commands such as “Clear Passcode”, “Clear a Restrictions passcode” and “Wipe Device” from our

MDM server (Casper, Profile Manager or Meraki).

I keep this entire rig in a pouch in my bag and take it everywhere with me. If you want to what it looks like in person

come see me after our session.



34/87

Networking

• Multiple iOS

Device Setup• Ethernet switch• Caching server• iLife and iWork

This Ethernet rig isn’t useful for just sending commands. You can use multiple rigs connected to a Gigabit switch,

which is connected to an OS X caching server, to enable simultaneous and dedicated high-speed app downloads

when preparing devices for your users. You’ll notice the speed di#erence when installing large apps such as Apple’s

iLife and iWork applications, which are hundreds of megabytes each.

On top of all this, you can connect your keyboard and barcode scanner to your USB hub at the same time! Andeverything works.



35/87

! Text Input

! Networking

! Screen Recording! Console and logs! Command line tools

As I mentioned earlier, wired networking via the Lightning port has been available since roughly iOS 6. What’s new in

iOS 8 and OS X 10.10 (Yosemite) is the ability to view and record what happens on your iOS device.



36/87

Screen Recording

Displaying an iOS screen on an Mac is a new feature Apple enabled for app developers so they could better demonstrate their apps. But nothing

stops us from using that feature too.

Why would admins want to display an iPad screen on their Macs? Two words: Documentation and Support. And for folks like me,

presentations.

Displaying or recording your iPad on your Mac requires OS X 10.10 Yosemite and iOS 8 devices with Lightning ports. This won’t work with 30-

pin iOS devices. To record something from your iPad you’ll use the QuickTime Player application found in the Applications folder.

Once you see your iPad on your screen, you can click the red Record button to start and stop recording and you can even choose whether to

record audio from your computer for voiceover narration or from your iOS device. Even if you’re not creating video documentation, you can still

record your step-by-step instructions and then scrub through your recording and copy screen shots out of the video for print documentation.



37/87

Screen Recording

Displaying an iOS screen on an Mac is a new feature Apple enabled for app developers so they could better demonstrate their apps. But nothing

stops us from using that feature too.

Why would admins want to display an iPad screen on their Macs? Two words: Documentation and Support. And for folks like me,

presentations.

Displaying or recording your iPad on your Mac requires OS X 10.10 Yosemite and iOS 8 devices with Lightning ports. This won’t work with 30-

pin iOS devices. To record something from your iPad you’ll use the QuickTime Player application found in the Applications folder.

Once you see your iPad on your screen, you can click the red Record button to start and stop recording and you can even choose whether to

record audio from your computer for voiceover narration or from your iOS device. Even if you’re not creating video documentation, you can still

record your step-by-step instructions and then scrub through your recording and copy screen shots out of the video for print documentation.



38/87

Screen Recording

Demo

Let’s see how this works. It’s simple to do:

$ Using your Lightning cable, connect your iPad to your Mac running OS X Yosemite.

$ Launch QuickTime Player found in the Applications folder.

$ Choose File > New Movie Recording.

$ From the Recording dialog, choose Camera from the dropdown menu and choose your iOS device.

If you’ve ever had to remotely support an IOS device, walk your customer through these steps to display it on screen

and then use Apple Remote Desktop, VNC or any other screen sharing software to watch what’s happening. This isn’t

interactive—you can’t click buttons on your Mac to control the iPad but you can guide someone in real time and

provide support without having to physically view the device.



39/87

! Text Input

! Networking

! Screen Recording! Console and logs! Command line tools

Now, let’s turn to some under-the-hood stu#.



40/87

Console and logs

OS X and iOS are both UNIX-based and share very similar Darwin kernels. While OS X allows us to peer into the

workings of its system, iOS is pretty much a closed interface.

We can view OS X logs and real-time data using the Console application, Terminal, Activity Monitor and other utilities.

The same activity we see there is also occurring on iOS devices. We just need to access it. How do we do that?



41/87

Console and logs

You may have downloaded and installed Xcode from the Mac App Store. If so, you already have what you need.

First, you’ll launch Xcode from the Applications folder and choose Devices from the Window menu. Next, plug in your

iOS device and tap the Trust button when prompted to trust your computer. If you choose not to trust now, your iPad

will prompt you again the next time you connect until you click Trust.



42/87

Console and logs

Xcode shows you basic information about your iPad such as name, model and iOS version.

If you click the Take Screenshot button, it’ll place a screenshot of your device’s screen on your Desktop. That could be

handy when your screen is damaged and you need to see what’s happening.



43/87

Console and logs

If you click the View Device Logs button you’ll find something similar to what you’d see in the Console application on

your Mac. On your iOS device these are mainly app crash logs. They’re not very helpful unless you know what you’re

looking for.



44/87

Console and logs



looking for.



45/87

Console and logs



looking for.



46/87


47/87

Console and logs

After reviewing the console information a little more I noticed the last line of the MDM output was “Server has no

commands for this device.”

I still didn’t know what was happening but the evidence I collected helped me determine our Wi-Fi network was just

fine and that I needed to be concentrating on our MDM server. This was something I could take to JAMF and ask

them to help us troubleshoot further.

Eventually, JAMF implemented a new feature and fixed a bug to help us with this problem. They implemented a

feature to send a remove focus command every time we clicked the Update Inventory button in our JSS and they

fixed a bug so configuration profiles would properly timeout and expire, so that focus got removed anyway when we

reached the end of our class times.



48/87

Console and logs

Xcode has a couple of drawbacks.

First, it’s huge—6 GB in size. It takes a long time to download and has a hefty footprint if all you need to do is look at

your iPad’s console output. The other drawback is that it has no filtering capabilities like OS X’s Console application.

You can’t just search for “mdmd”, which is the process I wanted to see when troubleshooting Casper Focus.

For routinely viewing iOS console information I recommend another item for your toolkit called “iOS Console” from

LemonJar.com. It’s very lightweight—only 7 MB—and looks very much like OS X’s Console application. It even

includes textual filtering to let you separate the useful data from the noise.



49/87

Console and logs

Xcode has a couple of drawbacks.

First, it’s huge—6 GB in size. It takes a long time to download and has a hefty footprint if all you need to do is look at

your iPad’s console output. The other drawback is that it has no filtering capabilities like OS X’s Console application.

You can’t just search for “mdmd”, which is the process I wanted to see when troubleshooting Casper Focus.

For routinely viewing iOS console information I recommend another item for your toolkit called “iOS Console” from

LemonJar.com. It’s very lightweight—only 7 MB—and looks very much like OS X’s Console application. It even

includes textual filtering to let you separate the useful data from the noise.



50/87

Console and logs

iOS Console

Download and use for free

$14.00 to support the developer

iOS Console is a beta product and you can currently download it and use it for free on OS X 10.9.2 or higher.

You have the option to support the developer by paying $14.00 but that may become a requirement once it’s out of

beta. Also, LemonJar does o#er volume pricing for iOS Console.



51/87

! Text Input

! Networking

! Screen Recording ! Console and logs! Command line tools

Finally, let’s look at some command line tools that not only give us more information about our devices but also let us

automate and control our devices. Keep in mind anything we can do in the command line is scriptable.



52/87

Command line tools

!"#"$%#"!&'&(")&

! 0;5))S"#,*P5;3 )5P*:,;$ ";5*505# #.G;,;F ,-< *55#)

*5 05331-.0,*$ :.*+ .TB


53/87


54/87

Command line tools

10.06.2015: Yep, libimobiledevice works with iOS 9.

Libimobiledevice doesn’t use proprietary libraries and calls that Apple deems o#-limits and it doesn’t require you to

jailbreak your iPhones and iPads. Everything it does, it does so natively with both 30-pin and Lightning devices.

And as of early June, the website reports “Yes, libimobiledevice works with iOS 9.” (mostly)



55/87

Command line tools

Z1);Z#50,#ZG.-Z

.


56/87

Command line toolsZ1);Z#50,#ZG.-Z.


57/87

Command line tools

Z1);Z#50,#ZG.-Z.


58/87

Command line tools

Z1);Z#50,#ZG.-Z.


59/87

Command line tools

Z1);Z#50,#ZG.-Z.


60/87

Command line tools

Z1);Z#50,#ZG.-Z.


61/87

Install Xcode command line developer tools

That should give you a taste of what the libimobiledevice tools can do. Where do you get them?

These are open source tools stored across Github repositories and you to compile them after downloading before you

can install them. If you’re like me you’re not a developer and this can get a little hairy. Here’s a list of things to do.

First, you need to install the Xcode command line developer tools. These are a subset of that 6 GB Xcode application

you can download from the Mac App Store. The easiest way to get these is to use the command line: “xcode-select --

install”. This goes out to Apple via Software Update and downloads and installs the tools.



62/87










63/87










64/87

Install full Xcode if installing iFuse

If you want to take advantage of iFuse, which is a sub-project of libimobiledevice for browsing your iPad’s folders and

files, you’ll need to download the full Xcode software from the Mac App Store and run the application once to accept

the license agreement and install the same command line tools.

If you’re not going to use iFuse, you only need to install just the Xcode command line tools.



65/87

" Install Homebrew

The easiest way to install libimobiledevice is to use a command line package manager called Homebrew. Homebrew

will take care of downloading all the dependencies and creating the installers for us.

First, we need to install Homebrew.

Next, we run “brew doctor”, which is Homebrew's self-diagnosis and cleanup tool.

Finally, we copy the suggested command at the end and paste it back into the Terminal to run it. This adds the "/usr/

local/bin" path to our user profile so we can choose to simply type "brew" going forward.



66/87

" Install Homebrew









67/87

" Install Homebrew









68/87

" Download and install libimobiledevice dependencies

Next, we need to install some dependencies. These are libraries and files that aren't part of libimobiledevice but

libimobiledevice needs them.

While this is installing, you'll notice a neat new little feature in Yosemite—it supports emoji! Look for the cute l ittle beer

mug!



69/87





mug!



70/87





mug!



71/87

Command line tools

&-)*,## i05


72/87

Command line tools

K)$ k53$G;$: *5 .-)*,## #.G.35G.#$


73/87

Command line tools

&-)*,## .c1)$ P5; G;5:).-2 .TB P.#$) ,-< P5#


74/87

Command line tools

Z1);Z#50,#ZG.-Z

.


75/87

Command line tools

K).-2 .c1)$(

H 36


76/87

Command line tools

K).-2 .c1)$(

H 36


77/87

Command line tools

K).-2 .c1)$(

H 36


78/87

Command line tools

K).-2 .c1)$(

H 0< qZ.",


79/87

Command line tools

K).-2 .c1)$(

H 0< qZ.",


80/87

Command line tools

K).-2 .c1)$(

H 0< qZ.",


81/87

Command line toolsB+$## )0;."*(

tuZG.-Z)+

W=9bhHV . General > About to get most of this information. Or

you could use the ideviceinfo tool in a script to read the information and send it to a tab-delimited file. In this case, the teacher did you a favorby resetting the devices because they won't prompt you to trust your computer. The trust is stored in the network settings of each device but

those network settings don't yet exist.

All you need to do is plug in a device, run the script and unplug the device. It'll take you longer to plug and unplug each device than it will to

actually run the script. You can have a spreadsheet of your 25 iPads in about two minutes.



82/87

Command line tools!""#$B0;."*(

)$* 1)$;!"") *5 on

)$* !""#$B0;."*o) *$\* .*$3


83/87

Command line toolsB+$## )0;."*(

tuZG.-Z)+

t 0;$,*$ G,061"

Bbe&!CRKaLbehHV Z1);Z#50,#ZG.-Z.


84/87

Screen Recording

Demo

Let's see the script in action.

I'll use my iPad to take three pictures of the room.

For the sake of convenience, I'll use BBEdit's feature to run this script. Since I don't have much on this iPad, it takes

less than a minute to complete.

First, note that my iPad shut down. If we browse the unpacked backups files, we should find our photos in the DCIM

folder.



85/87

! Text Input

! Networking

! Screen Recording ! Console and logs

" Command line tools

Today, we discussed a couple of methods for entering text such as simple keyboards and barcode scanners with

barcode fonts. The more complex setups used powered USB hubs, which allowed us to also network our iOS

devices.

New in Yosemite and iOS 8 is the ability to display an iPad's screen on our Mac, make videos and capture screen

shots. Don't forget this method is also useful for remote support when you can't directly view an iPad.

We looked at how to get diagnostic and forensic information from an iPad using Xcode or iOS Console. And finally, we

touched on the libimobiledevice toolset for reading information, sending commands and demonstrated how those

tools could fit into larger scripted projects.



86/87

Q&A



87/87

William Smith318, Inc.Santa Monica, CA

[email protected]://talkingmoose.net@meck

iOS - Reconnect the CordFeedback: http://j.mp/psumac2015-89

ios en la empresa

Documents