what's new in apple device management
TRANSCRIPT
![Page 1: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/1.jpg)
© 2016 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.
Distribution #WWDC16
Session 303
What’s New in Apple Device Management
Todd Fernandez Senior Manager, Device Management & Server
![Page 2: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/2.jpg)
![Page 3: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/3.jpg)
![Page 4: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/4.jpg)
WWDC 2016
![Page 5: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/5.jpg)
![Page 6: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/6.jpg)
Back To School
![Page 7: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/7.jpg)
![Page 8: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/8.jpg)
Configure
Devices
![Page 9: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/9.jpg)
![Page 10: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/10.jpg)
Order
DevicesBuy
Apps
![Page 11: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/11.jpg)
![Page 12: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/12.jpg)
Evaluate Tools
![Page 13: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/13.jpg)
iOS 9.3
![Page 14: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/14.jpg)
Spring 2016
![Page 15: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/15.jpg)
Spring 2016
![Page 16: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/16.jpg)
Apple School Manager
![Page 17: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/17.jpg)
![Page 18: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/18.jpg)
“Apple School Manager will save our tech staff lots of time—we can manage devices, content, and our student accounts all from one place.”
Patrick ScanlanSupervisor of Technology & Information ServicesSan Jose Unified School District
![Page 19: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/19.jpg)
Shared iPad
![Page 20: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/20.jpg)
![Page 21: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/21.jpg)
![Page 22: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/22.jpg)
![Page 23: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/23.jpg)
![Page 24: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/24.jpg)
![Page 25: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/25.jpg)
“Shared iPad will allow our district to transform a cart of shared devices intoa personalized learning experience for each student.”
Eric CulpepperTechnology Support SpecialistGoose Creek CISD
![Page 26: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/26.jpg)
Classroom
![Page 27: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/27.jpg)
![Page 28: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/28.jpg)
“Classroom has been an extremely useful tool throughout the school day … to enhance the Project Based Learning that is going on in my classroom. Classroom helps me to keep all my students accountable for their work, while also keeping them extremely engaged in their assignments.”
Ryan Garcia-GananFourth Grade TeacherSan Jose Unified School District
![Page 29: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/29.jpg)
Spring 2016
![Page 30: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/30.jpg)
Getting Started Distribution ToolsManagement
![Page 31: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/31.jpg)
Getting Started
![Page 32: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/32.jpg)
Getting Started
Apple deployment programsApple School ManagerManaged Apple IDEnrollmentShared iPad
![Page 33: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/33.jpg)
EnterpriseGetting Started
Apple deployment programsDevice Enrollment Program (DEP)Volume Purchase Program (VPP)Many new settings and commands
![Page 34: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/34.jpg)
Apple School ManagerGetting Started
PeopleDevicesContent
![Page 35: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/35.jpg)
PeopleApple School Manager
Input• SIS integration• CSV upload
Managed Apple ID• Students• Teachers
Classes
![Page 36: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/36.jpg)
Managed Apple IDApple School Manager
Admin accounts• Tiered administration• Roles and privileges
Student accounts• Required for Shared iPad• Passcode options• Disabled services
- Commerce, FaceTime, iMessage, iCloud Mail, …
![Page 37: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/37.jpg)
APIApple School Manager
Roster ServiceUsers• Students• Teachers
Classes
![Page 38: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/38.jpg)
API: TransitionApple School Manager
Check during syncs if token is now ASM type (API v3)Tell DEP you support API v3 by including in header
Customers do not need to download new tokens
![Page 39: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/39.jpg)
API: Best practicesApple School Manager
Handle duplicate records from multiple sources (e.g., LDAP + API)• Allow admin to configure automatic policy
matching criteria• Allow admin to manually merge records
source_system_identifier corresponds to CSV “PersonNumber”• Field is mutable and not guaranteed to be
unique!
![Page 40: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/40.jpg)
API: Best practicesApple School Manager
No delta API• SIS syncing only once per day• Don't automatically perform “full sync” more
than once per day• Consider throttling admin-initiated syncs
![Page 41: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/41.jpg)
DevicesApple School Manager
Device Enrollment Program• Find purchases• Configure MDM servers• Assign devices to MDM servers
![Page 42: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/42.jpg)
ContentApple School Manager
Volume Purchase ProgramiTunes U
![Page 43: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/43.jpg)
Enrollment optimizationSecurity best practicesConfigure Setup AssistantMDMServiceConfigShared iPad
EnrollmentGetting Started
![Page 44: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/44.jpg)
Enrollment optimizationEnrollment
![Page 45: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/45.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
![Page 46: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/46.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 DEP Settings
![Page 47: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/47.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2DEP Settings
![Page 48: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/48.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2DEP Settings
TokenUpdate (AwaitingConfiguration)
3
![Page 49: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/49.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
await_device_configured
1 2DEP Settings
CommandsConfiguration Profiles 4
TokenUpdate (AwaitingConfiguration)
3
![Page 50: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/50.jpg)
Enrollment optimizationEnrollment
MDM Server
Device Enrollment Program
iOS Device or Mac
Exit Setup Assistant
await_device_configured
1 2DEP Settings
CommandsConfiguration Profiles 4
DeviceConfigured 5
TokenUpdate (AwaitingConfiguration)
3
![Page 51: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/51.jpg)
Enrollment optimization: Shared iPadEnrollment
![Page 52: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/52.jpg)
Enrollment optimization: Shared iPadEnrollment
MDM Server Shared iPad
![Page 53: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/53.jpg)
Enrollment optimization: Shared iPadEnrollment
MDM Server Shared iPad
1
User signs in
![Page 54: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/54.jpg)
Enrollment optimization: Shared iPadEnrollment
MDM Server Shared iPad
1
2
User signs in
TokenUpdate
![Page 55: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/55.jpg)
Enrollment optimization: Shared iPadEnrollment
MDM Server Shared iPad
1
2
User signs in
3Commands
Configuration Profiles TokenUpdate
![Page 56: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/56.jpg)
Security best practicesEnrollment
iOS 9.3.2 no longer supports MD5DES deprecatediOS 10 adds AES support
SCEP servers need to support 3DES orAES as soon as possible
![Page 57: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/57.jpg)
Configure Setup AssistantEnrollment
True Tone
![Page 58: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/58.jpg)
Configure Setup AssistantEnrollment
Siri iCloud Desktop
NEW
![Page 59: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/59.jpg)
Equivalent to VPP Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url • dep_anchor_certs_url • trust_profile_url
MDMServiceConfigDevice Enrollment Program
![Page 60: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/60.jpg)
Equivalent to VPP Storebag from iTunes StoreInforms tools what info they can obtain from your serverUnauthenticated HTTPS request at URI MDMServiceConfigUTF8 JSON-encoded hash• dep_enrollment_url • dep_anchor_certs_url • trust_profile_url
Profile Manager has implementedConfigurator 2 now supports
MDMServiceConfigDevice Enrollment Program
![Page 61: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/61.jpg)
Shared iPad
![Page 62: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/62.jpg)
Shared iPad
Support multiple usersInstall appsPreserve user data
![Page 63: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/63.jpg)
Multiple usersShared iPad
Requires Managed Apple ID to sign inSigns in to iCloud and iTunes
![Page 64: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/64.jpg)
Installing appsShared iPad
Device assignedMDM vendors use PurchaseMethod 1All app types supported• App Store developers must allow device assignment
![Page 65: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/65.jpg)
ArchitectureShared iPad
Student data truth in the cloud• Data is cached, but may be purged when needed• User data separation• Data will continue to upload after sign out if necessary
Apps should be education ready
![Page 66: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/66.jpg)
![Page 67: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/67.jpg)
![Page 68: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/68.jpg)
![Page 69: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/69.jpg)
![Page 70: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/70.jpg)
![Page 71: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/71.jpg)
![Page 72: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/72.jpg)
![Page 73: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/73.jpg)
![Page 74: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/74.jpg)
Uploading Mia’s Data
![Page 75: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/75.jpg)
Uploading Mia’s Data
![Page 76: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/76.jpg)
Uploading Mia’s Data
![Page 77: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/77.jpg)
Uploading Mia’s Data
![Page 78: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/78.jpg)
Uploading Mia’s Data
![Page 79: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/79.jpg)
Uploading Mia’s Data
![Page 80: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/80.jpg)
Downloading Gabriel’s Data
Uploading Mia’s Data
![Page 81: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/81.jpg)
![Page 82: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/82.jpg)
![Page 83: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/83.jpg)
Support in MDM serversShared iPad
New DEP setting to enableUse Enrollment Optimization to set options beforestudent use• User quota• Lock screen grace period
![Page 84: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/84.jpg)
User quotaShared iPad
![Page 85: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/85.jpg)
User quotaShared iPad
Maximum numbers of users cached locally
![Page 86: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/86.jpg)
User quotaShared iPad
Maximum numbers of users cached locallyStorage allocated to each user calculated automatically
![Page 87: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/87.jpg)
User quotaShared iPad
Maximum numbers of users cached locallyStorage allocated to each user calculated automatically
![Page 88: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/88.jpg)
User quotaShared iPad
Maximum numbers of users cached locallyStorage allocated to each user calculated automaticallyAfter limit reached, new user purges the cache of the LRU user
![Page 89: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/89.jpg)
Maximum numbers of users cached locallyStorage allocated to each user calculated automaticallyAfter limit reached, new user purges the cache of the LRU user
User quotaShared iPad
![Page 90: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/90.jpg)
Maximum numbers of users cached locallyStorage allocated to each user calculated automaticallyAfter limit reached, new user purges the cache of the LRU user
User quotaShared iPad
![Page 91: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/91.jpg)
Lock screen grace periodShared iPad
Time after screen locks that devicewill prompt for user passcodeBefore time limit reached, student canwake device with just a swipe
![Page 92: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/92.jpg)
![Page 93: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/93.jpg)
![Page 94: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/94.jpg)
![Page 95: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/95.jpg)
![Page 96: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/96.jpg)
![Page 97: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/97.jpg)
![Page 98: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/98.jpg)
![Page 99: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/99.jpg)
User channelShared iPad
Allows MDM server to configure per-user settings• Similar to macOS• iOS devices running 9.3 and later don’t ignore it• Some payloads now supported
No user authentication on iOS• Never send sensitive information over user channel
- User channel enforces no credentials- Google OAuth supported, but without credentials
![Page 100: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/100.jpg)
User channel: Supported payloadsShared iPad
Accounts, including Google OAuth accountNotificationsHome screen layoutManaged Domains: Safari autofill domainsRestrictions, including Show/Hide Apps
![Page 101: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/101.jpg)
User channel: Restrictions payloadsShared iPad
Most restrictive winsCombined to compute effective restrictions• Just like multiple profiles
![Page 102: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/102.jpg)
DemoShared iPad
David SteinbergDevice Management Engineer
![Page 103: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/103.jpg)
Shared iPadDemo Recap
Classes preconfigured on login screenRecent usersSign in with Managed Apple ID and passcodeSign in choosing recent userApps show only current user’s dataDifferent users see different apps and home screen layout
![Page 104: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/104.jpg)
Getting Started Distribution ToolsManagement
![Page 105: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/105.jpg)
Distribution
![Page 106: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/106.jpg)
Distribution
Managed Apple IDBooks for Shared iPadEnterprise Apps
![Page 107: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/107.jpg)
Managed Apple ID associationVPP
Programmatically associate Managed Apple IDs for VPP
Requires DEP/ASM token and VPP tokens from same organization• Customer doesn’t need new tokens after transition to ASM• DEP and VPP use different tokens so could be different organizations
- Dedicated error code for this failure mode; try and fail
Requires MDM solution adopt APIImportant for iBooks Store books
![Page 108: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/108.jpg)
Books for Shared iPadVPP
iBooks Store VPP books• Assigned to users• Cannot be distributed to devices• Shared iPad user must “download” in iBooks
- Downloaded only once per device
Non-iBooks Store books• PDF, IBA, EPUB• Device assigned
![Page 109: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/109.jpg)
UPPsEnterprise Apps
Allow non-App Store app to run on device not defined in provisioning profileRequire trust and validationUser must explicitly trust apps from that signer to run on this device• Apps installed via MDM implicitly trusted
Apple must consider this UPP still valid• Periodic checks via online connection to validation server• MDM installed apps still require periodic validation• MDM can trigger validation for any app• Automatically validate any applications that it discovers are not validated
![Page 110: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/110.jpg)
Getting Started Distribution ToolsManagement
![Page 111: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/111.jpg)
Management
![Page 112: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/112.jpg)
Management
Shubham KediaiOS Engineer
![Page 113: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/113.jpg)
MDM commands and queriesWhat’s New in iOS 9.3
Settings now allows setting max users, diagnostic submission
User ListLogout userDelete User
MDM Lost Mode (including device location)MDM Activation Lock
![Page 114: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/114.jpg)
Configuration profile payloadsWhat’s New in iOS 9.3
EducationNotificationsHome Screen LayoutLock Screen Message
Exchange, Mail: Allow Mail DropManaged Domains: Safari autofill passwordsVPN: Many new IKEv2 settingsRestrictions: Many new settings
![Page 115: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/115.jpg)
Configuration profile payloads: RestrictionsWhat’s New in iOS 9.3
Apple MusicClassroom Screen ViewiCloud Photo LibraryiTunes RadioModify NotificationsShow/Hide Apps
![Page 116: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/116.jpg)
Configuration profile payloads: EducationWhat’s New in iOS 9.3
StudentsTeachersClassesPhotos• URLs• Get required HTTPS
Used by Shared iPad login screen and ClassroomOnly one allowed per deviceStudent devices and teacher devices need different payloads
![Page 117: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/117.jpg)
Configuration profile payloads: Per-user on Shared iPadWhat’s New in iOS 9.3
Five payloads can now apply per-user on Shared iPadAccounts• Google OAuth account
NotificationsHome screen layoutManaged Domains: Safari autofill domainsRestrictions• Show/Hide Apps
![Page 118: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/118.jpg)
MDM commands and queriesWhat’s New in iOS 9.3.2
Enable/Disable App AnalyticsSet lock screen grace period
DeviceInformation returns App Analytics enabled/disabledSecurityInfo returns lock screen grace period
![Page 119: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/119.jpg)
Automatic Assessment ConfigurationWhat’s New in iOS 9.3.2
Continues to work same way on supervised devicesNew entitlementAPI then disables five features while app is running:• Auto correction, Define, keyboard shortcuts, predictive keyboard, spell check
Safe escape behavior on unmanaged devices
![Page 120: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/120.jpg)
Configuration profile restrictionsWhat’s New in iOS 9.3.2
Modify diagnostics submission
![Page 121: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/121.jpg)
Configuration profile payloadsWhat’s New in iOS 10
Contacts, Exchange, Google, LDAP: Communication service rules for audioLock Screen Message: Updated key namesVPN: IKEv2 EAP only authentication method, timeout for IPSecVPN: PPTP has been removed from iOS 10• Existing payloads will not work
Wi-Fi: Captive bypassWi-Fi: Cisco fast lane QoS markingRestrictions: Modify Bluetooth
NEW
![Page 122: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/122.jpg)
Configuration profile restrictionsDeprecations
App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends
![Page 123: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/123.jpg)
Configuration profile restrictionsDeprecations
App installationApp removalFaceTimeSafariiTunesExplicit contentiCloud documents and dataMultiplayer gamingAdd GameCenter Friends
![Page 124: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/124.jpg)
MDM commands and queriesWhat’s New in OS X 10.11.4
Install major update (DEP Macs)
![Page 125: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/125.jpg)
Configuration profile payloadsWhat’s New in macOS Sierra
IP firewallRestrictions• Apple Music• iCloud keychain sync• iCloud Photo Library• Back to my Mac• Find My Mac• Sharing to Notes, Reminders, or LinkedIn
NEW
![Page 126: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/126.jpg)
Getting Started Distribution ToolsManagement
![Page 127: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/127.jpg)
Tools
![Page 128: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/128.jpg)
Classroom
![Page 129: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/129.jpg)
Assign Shared iPadLaunch appNavigate to locationAirPlay to Apple TVLock iPadView screen
![Page 130: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/130.jpg)
DemoClassroom
Shruti GuptaDevice Management Engineer
![Page 131: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/131.jpg)
ClassroomDemo Recap
Open appCreate and edit groupsLock to appView screenLock device
![Page 132: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/132.jpg)
DEP and VPP SimulatorsTools
Simulate DEP and VPP servicesTest handling of service errors
Now supports all the new DEP and VPP features
Available for download on developer portalSupport new features
![Page 133: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/133.jpg)
Getting Started Distribution ToolsManagement
![Page 134: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/134.jpg)
AdministratorsSummary
Use Apple School Manager to manage people, devices, contentUse DEP (wireless) or Configurator (wired) to enroll devices in MDMUse Shared iPad with Managed Apple ID on shared devicesUse VPP Managed Distribution to distribute apps to devices or users
![Page 135: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/135.jpg)
MDM developersSummary
Support VPP Managed Apple ID associationSupport new features in iOS 10 and macOS Sierra• Documentation available now
Test with DEP and VPP simulators
![Page 136: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/136.jpg)
App developersSummary
Store data and preferences in cloudTest using app with two iPads
![Page 137: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/137.jpg)
Related Sessions
Best Practices for Building Apps Used in Business and Education Nob Hill Wednesday 1:40PM
![Page 138: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/138.jpg)
Labs
Education and Enterprise Deploymentand Development Lab
Graphics, Games, and Media Lab C Tuesday 1:30PM
Education and Enterprise Deploymentand Development Lab Fort Mason Wednesday 3:00PM
Education and Enterprise Deploymentand Development Lab Fort Mason Thursday 11:00AM
![Page 139: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/139.jpg)
apple.com/education
apple.com/educationResources for Education
apple.com/education
![Page 140: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/140.jpg)
developer.apple.com/enterpriseResources for Enterprise
developer.apple.com/enterprise
![Page 141: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/141.jpg)
More Information
https://developer.apple.com/wwdc16/303
![Page 142: What's New in Apple Device Management](https://reader033.vdocuments.us/reader033/viewer/2022051507/58a2d69a1a28ab863a8b6cf6/html5/thumbnails/142.jpg)