Managed App Configuration using Profile Manager

Hello,
We're using Profile Manager as the MDM server of our iPads. Everything works fine except that recently we want to manage some app configurations through MDM, but were unable to find the Managed App Configuration settings from Profile Manager.
May I know if Profile Manager supports Managed App Configuration for iOS?
Thanks,
Jacky

We are not running it yet but I am believe that when you setup a user in airwatch or another MDM and you install the agent on a device the user has to authenticate with AD creds, so then you can configure it to pull a cert from your SCEP server using those creds and it will then pull a user cert. instead of a generic certificate. Obviously that is a pretty dumbed down explination but in a nutshell that is how it is going to work.

Similar Messages

  • HT5188 Can I use Profile Manager to deploy paid Apps?

    Can I import VPP codes and push the apps to the ipads without user interaction?

    No, some user interaction will be required. With any MDM they will have to accept the app.
    While we use the term push, the user has to accept all App installations on the device. They will have to touch install. Please read below from:
    http://krypted.com/iphone/configuring-using-profile-manager-2-in-os-x-mountain-l ion-server/
    " This brings up an interesting limitation of how Profile Manager interacts with the App Store. It kinda’ doesn’t. If I were pushing apps to elementary school iPads in a 1:1 I could either use Apple Configurator (if I wanted to burn up a VPP code per student per year) or I could use iTunes (if I wanted a labor intensive process of restoring an iPad per computer rather than a parallel process). But either way, I’m gonna’ stay away from Profile Manager for apps.
    So if you push an app to a device and the user taps on the app and the screen goes black then make sure the app is owned by the AppleID signed into the device. If it is, have the user open App Store and update any other app and see if the app then opens."

  • Use Profile Manager to configure 802.1x authentication to Active Directory

    I have an OS X Lion Server running profile manager, and I want to authenticate Macs against Active Directory. My test machine is running Lion as well.
    If I configure the profile to for WPA/WPA2 Enterprise security type and PEAP protocol with a generic user name and password with explicit access on the RADIUS server, the machine can get on the 802.1x network
    If I configure the profile to "Use as a Login Window configuration", the machine can get on the 802.1x network after entering the user name and password of an authorized RADIUS user.
    Here's my problem:
    I want to enable authentication for machines that are members of the Active Directory domain, but when I use the "Use Directory Authentication" option to authenticate with the target machine's directory credentials, the machine does not connect to my 802.1x network.
    Any thoughts?
    Thanks!!!!

    I'm trying to do the same thing, but I'm using Mountain Lion Profile Manager.  If I can't get this to work I'm going to try SCEP and certificate authentication.

  • 1 iPad used by multiple people, configurator or profile manager?

    We have one iPad that needs to be taken out by 3 or 4 people at various times, we have mountain lion server running Profile Manager.
    I have just downloaded Apple Configurator to supervise the iPad to allow us to re-assign it to different people as needed.
    My question is, should you set up the configuration profiles using Apple Configurator or use Profile Manager to handle this, or doesn't it make any difference?

    You can all have independent AppleIDs for iCloud or iMessage etc, but share the same one for iTunes Store / AppStore purchases.

  • HT201334 Apple configurator vs Profile Manager

    I downloaded apple configurator and have it working. Then I realized profile manager in OSX Server does the same thing. What is the difference, can I leave it as is? Any benefit of just using profile manager?

    Apple configurator has its uses.
    Apple configurator can be used as a "manual" standalone solution to manage you iDevices and AppleTVs.
    Apple configurator can be used in blended approach with Profile Manager.
    With Profile Manager you can manage iDevices , Macs , and I believe AppleTv over the AIR.
    - Apple Configure Stand Alone.
    When using Apple Configurator by itself you can , lock down an iPad in a way you see fit.
    1. You can make an iDevice in "Supervise Mode" increasing restricting of your iDevice , Profile Manager cannot do this at the moment , this feature will be available in Mavericks.
    2. Any future configuration changes to your iDevices , must be physically plugged in everytime for those changes.
    3. You can distribute free and paid apps.
    4. You can update your IOS updates all at once. When IOS 7 comes out this fall you probably dont want to touch every iDevice and update 1 at a time. You can use Apple Configurator to download the latest IOS , and any IDevice that you plugin will receive the update, this means downloading th IOS update one time on the mac, and pushing it out to whoever needs it. Profile Manager can't do this.
    5. You can name several iDevices sequently. If you have a cart of 30 it will be easy to rename your iDevices. Profile Manager can't do this.
    6. Apple configurator allows you to "backup and restore" its not a true complete image but its close. Profile Manager does not do backups or restores.
    7. Apple Configurator can be used to erase an iDevice.
    8. I'm probably missing some more features.
    - Profile Manager Stand Alone
    1. You can manage Macs not just iDevices.
    2. You must enroll the device before you can manage it, this can be done by pushing out an email , via a website etc.
    3. Everything happens over the Air.
    4. When enrolling , users can use their Open Directory or Active Directory ( if your Apple server is bound to AD server ). You can also create a generic account for enrolling purposes.
    5. You can wipe devices over the air.
    6. You can make pass code resets for iDevices.
    7. You can manage users in groups , even nested groups. I manage staff and student iDevices. Our wireless system is seperated for staff and students each wireless has its own SSID. I created 2 upper level Profile Manager Groups , one called WiFi Student and one called WiFi Staff, all my student iDevice groups are nested under WiFi Student group and all my staff idevice groups are nested. This makes managing my wifi a breeze. I also include my mifi wireless info , in case i need a backup emergency wireless.
    8. Im sure theres other features.
    - Apple Configurator And Profile Manager Blended
    1. Push out initial wifi settings. I setup a simple wireless router to connect my devices ( there are types when I setup over 50 ipads , and our network runs out of IPs)
    2. You can use Apple Configurator to push out Profile Managers "enrollment profile" to many iDevices. You dont want to enroll a full iDevice cart one at a time via a web browser.
    Maverick and IOS 7
    In the fall everything will change , it is amazing what we will be able to do. Over the Air Supervise Mode , Install Apps over the air with no user interaction, App codes become licenses , which are revokeable and reusable. Out of the box enrollment ... There may be no need for Apple Configurator come this fall. So many things are changing I recommend watching the new WWDC2013 Videos, specially the one on device management.
    Back to original topic. 
    I value both products , they have their specilties and when you blended , you can get things done efficiently.

  • Ipad enterprise apps update through Profile Manager

    Hello,
    we are using OS X Server Profile Manager to push enterprise Apps to an iPad fleet. It is working quite fine for the "initial" download : when a new app is made available to the iPads, it is downloaded without any problem.
    The problem arise with "new release" of an existing app. For example, the developper (a web agency) release the 1.1 version of an existing app (in version 1.0).
    I upload this new version in the profile manager app library. As it is the same app, it appaers under the same name. As we can't have any details on the enterprise Apps in the Profile Manager app library, I can not be sure that the newly uploaded app has properly replaced the old version. And on the iPads, nothing happens, they do not download the new version.
    What am I doing wrong ? Is the Profile Manager supposed to be working to "push" new releases of enterprise app ?
    Thank you.
    PYC

    Watch this video.  It education based, but that's OK.
    There are three ownership models:
    Personal
    Institution
    Layered. combines personal & institution.
    Here is the apple video on Layered ownership:
    http://www.apple.com/education/resources/videos/#ios-layered-ownership
    IT Resources -- ios & OS X -- This is a fantastic web page.  I like the education site over the business site.
    View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
    http://www.apple.com/education/resources/information-technology.html
       business site is:
       http://www.apple.com/lae/ipad/business/resources/
       business site is:
       http://www.apple.com/lae/ipad/business/resources/
    With VPP an mdm is handy. Meraki is web based & free.
    MDM  -- moble device management
    MDMs
    Airwatch, Nukona, Meraki, mobleIron, OS X Server, or Zenprise
    Meraki -- A free MDM
      http://www.meraki.com/products/systems-manager/
      https://discussions.apple.com/thread/4067210?tstart=0

  • My iPhone 4s notified me that I had to manage my storage  so I deleted  apps that used a lot of space I deleted almost all my picture and it still keeps telling me  I don't have enough storage  is there any other way I can make room on my phone ?

    My iPhone 4s notified me that I had to manage my storage  so I deleted  apps that used a lot of space I deleted almost all my picture and it still keeps telling me  I don't have enough storage  is there any other way I can make room on my phone ?  Were it shows how much storage  I have available it still says 9.9 even after all that I have done so I don't know if I need to change my storage plan or what but anything will help I guess

    Check for 'others' in iTunes against your iPhone.
    Restore from a previous backup to reclaim some of it.
    Still want more, Restore in iTunes, setup as New.

  • Manage MSMQ is missing from Failover Cluster Manager when configured using powershell

    Hi,
    I am hoping someone would be able to help me as I have looked on the internet for an answer to this. We deploy a number of servers that are configured using Powershell. I am in the process of creating a clustered WIN2K8R2 cluster with MSMQ. I am able to
    do this successfully through the Failover Mgr with no issues.  In addition, I can do this via Powershell (code listed below) with one caveat.
    However, when I create the same exact MSMQ in Powershell, I am unable to right click on the MSMQ service to manage it as the "Manage MSMQ" is missing when I right click on it. The settings are the same, including dependencies. The only difference
    I have been able to find is the icon in the Failover Manager shows the Service as a Generic Service icon when created in Powershell, but when it is created in the GUI it shows up as the MSMQ icon. I was able to verify this in the registry in HKLM\Cluster\Groups\<GUID>\:
    GroupType HEX: 68 for msmq icon. When it is the Generic Service icon it is HEX: 270f. When I change it from 270f to 68, the icon changes in Failover Manager and I am able to open, but then I get an invalid handle and I am unable to manage it.
    This is causing an issue, because I want to automate this build and hand it over, but they would be unable to manage it except by programming which the operators are not ready for.
    Here is the code which I have created in Powershell:
        Write-host "Configuring MS MSMQ Cluster Failover..."
        $CluName = "Cluster Name"
        $ClsMSMQName = $CluName.Name + "MSMQ"
        $ClsMSMQResourceName = "MSMQ-" + $ClsMSMQName
        $Response = Read-host "Enter the IP Address of the Clustered MSMQ"
        $ClsIpRes = get-clusterresource "Cluster IP Address"
        $MSMQIpAddr = New-Object Microsoft.FailoverClusters.PowerShell.ClusterParameter $ipres,Address,$Response
        Add-ClusterServerRole -Name $ClsMSMQName -Storage "Cluster Disk" -StaticAddress $MSMQIpAddr.value
        # Add the MSMSMQ Service to the new Server Role
        Get-ClusterGroup $ClsMSMQName | Add-ClusterResource -Name $ClsMSMQResourceName -ResourceType "MSMQ"
        # Create Dependencies for the MSMQ group
        Add-ClusterResourceDependency $ClsMSMQResourceName $ClsMSMQName
        Add-ClusterResourceDependency $ClsMSMQResourceName "Cluster Disk"
        # Start MSMQ group
        Start-ClusterGroup $ClsMSMQName
    You would just have to change "Cluster Disk" and "Cluster Name".
    Thank you

    Hi,
    I am hoping someone would be able to help me as I have looked on the internet for an answer to this. We deploy a number of servers that are configured using Powershell. I am in the process of creating a clustered WIN2K8R2 cluster with MSMQ. I am able to
    do this successfully through the Failover Mgr with no issues.  In addition, I can do this via Powershell (code listed below) with one caveat.
    However, when I create the same exact MSMQ in Powershell, I am unable to right click on the MSMQ service to manage it as the "Manage MSMQ" is missing when I right click on it. The settings are the same, including dependencies. The only difference
    I have been able to find is the icon in the Failover Manager shows the Service as a Generic Service icon when created in Powershell, but when it is created in the GUI it shows up as the MSMQ icon. I was able to verify this in the registry in HKLM\Cluster\Groups\<GUID>\:
    GroupType HEX: 68 for msmq icon. When it is the Generic Service icon it is HEX: 270f. When I change it from 270f to 68, the icon changes in Failover Manager and I am able to open, but then I get an invalid handle and I am unable to manage it.
    This is causing an issue, because I want to automate this build and hand it over, but they would be unable to manage it except by programming which the operators are not ready for.
    Here is the code which I have created in Powershell:
        Write-host "Configuring MS MSMQ Cluster Failover..."
        $CluName = "Cluster Name"
        $ClsMSMQName = $CluName.Name + "MSMQ"
        $ClsMSMQResourceName = "MSMQ-" + $ClsMSMQName
        $Response = Read-host "Enter the IP Address of the Clustered MSMQ"
        $ClsIpRes = get-clusterresource "Cluster IP Address"
        $MSMQIpAddr = New-Object Microsoft.FailoverClusters.PowerShell.ClusterParameter $ipres,Address,$Response
        Add-ClusterServerRole -Name $ClsMSMQName -Storage "Cluster Disk" -StaticAddress $MSMQIpAddr.value
        # Add the MSMSMQ Service to the new Server Role
        Get-ClusterGroup $ClsMSMQName | Add-ClusterResource -Name $ClsMSMQResourceName -ResourceType "MSMQ"
        # Create Dependencies for the MSMQ group
        Add-ClusterResourceDependency $ClsMSMQResourceName $ClsMSMQName
        Add-ClusterResourceDependency $ClsMSMQResourceName "Cluster Disk"
        # Start MSMQ group
        Start-ClusterGroup $ClsMSMQName
    You would just have to change "Cluster Disk" and "Cluster Name".
    Thank you

  • Not allow simultaneous login on managed computers using profile mangaer

    Does any one knows how to not allow simultaneous login on managed computers using Profile Manager instead of Workgroup Manager?
    Thanks in advanced

    Hi Folks
    First - thanks for your help.
    Closing this out - here is what I learned:
    1) Needed to ensure my server was Kerberised and that Kerebos was running correctly
    2) Local users have precedence over network so I need to ensure I don't use the same short name. While using the "id" command you may be able to see the network user ID, the local of the same name appears to take precedence.
    3) Using the "kinit" command useful for confirming Kerebos is working correctly
    4) Home directories created - had already done this but what finally got this working was stopping and restarting AFP Service.
    So was able to successfully login to Mac Client using OD username and password - it mounted the network home share just fine on the client, loaded preferences etc.
    Now on to create network users with Mobile Accounts for my laptop users - wish me luck

  • Standalone 10.1.3.1.0 - Configure app to use the data-sources on parent app

    Hello:
    1.- I have defined a connection pool, and a data source, for the parent app "default"
    in my oc4j standalone.
    2.- I read in some place, that I can use those definitions in my deployed apps,
    without define a datasource for every app.
    3.- Previously, I have my own data-sources.xml file in every ear file, with exactly
    the same information, and in my orion-application.xml, i have a <data-source>
    tag, specifying this file.
    4.- Now i want to use the parent's data-sources definitions, so I remove from all my ear files, the data-sources.xml file, and the tag in the orion-application.xml, I've deployed the apps, but I can't connect to de parent datasource, so..
    How can I configure my apps, to use the parent's data sources configurations?
    thnks in advance.
    Alex.

    You could also define a datasource for the OC4J instance. Then the apps deployed on it, can retrieve the datasource.
    Ronald

  • Can the iPhone have settings profiles?  I want the settings of what apps are using the "call home" automatically set based on my location or the time of day.  Is this possible?

    Can the iPhone have settings profiles?  I want the settings of what apps are using the "call home" automatically set based on my location or the time of day.  Is this possible?  Of course the GPS location feature will need to be on in order for this to work.  But the idea here would be to optimize battery life by disabling the 'call home' requests of apps.  The settings profile should also support downloads as I would like to download and allow it when I am on WiFi but not so much when I am using my cellular data.

    No, this is not possible as the sandboxed nature of iOS would not allow any app to modify another app like that. Such a feature would have to be enabled by Apple as a part of iOS itself. You can submit feedback to Apple about the idea if you wish to.
    https://www.apple.com/feedback/

  • HT203071 How does the clients (iOS devices) to configure/use the caching server to download apps from local caching server instead of App store?

    Hi ... How does the clients (iOS devices) to configure/use the caching server to download apps from local caching server instead of App store?

    Hi,
    If you want to restore a reomoved app,you need to use
    Add-AppxPackage to add a signed app package (.appx) to a user account.
    But we cannot extract them from the ISO.
    The behavior is by design.And this is a software protection regime.
    Thanks for your understanding.
    Regards,
    Kelvin Xu
    TechNet Community Support

  • Database Validation Failed error while configuring RDBMS profile for audit

    Hi,
    I am using Oracle Access Manager 10.1.4.3.0 with FMW 11g (Oracle internet Directory and Oracle Virtual Directory) on Linux X64.
    While configuring RDBMS profile for OAM Auditing and reporting...
    I am getting "Database Validation Failed" error both in Identity and Access servers
    When I am looking in oblog...I got following in Identity..
    2010/07/17@06:59:28.882658     17384     17422     CONNECTIVITY     DEBUG3     0x00000201     obmessagechannel.cpp:179     "Sending: "     seqno^13     opcode^8     pMsg^{25}st={5}ma=22{4}mi=2{4}sg=0{4}rt=0     
    2010/07/17@06:59:28.882704     17384     17422     NET     DEBUG3     0x00000201     obsocket.cpp:848     "ObSocketOIS::WriteFully"     _sock^19     LocalAddr^10.31.13.129     LocalPort^6022     RemoteAddr^10.31.13.134     RemotePort^41646     
    and in Access..
    2010/07/17@06:39:09.391459     3326     3388     AUDIT     ERROR     0x00001D04     ../dbauditwriter.cpp:410     "The database audit writer was unable to perform the write"     
    2010/07/17@06:39:09.391491     3326     3388     AUDIT     WARNING     0x00001149     /usr/abuild/Oblix/10143hf/palantir/aaa_server/src/audit_handler.cpp:1119     ""Unable to write the audit record"
    Kindly advice...

    Hi.
    Strange !
    Check whether the RFC destiantion LCRSAPRFC is proper. Test the connection and Also check the exchange profile paramteres in the XI.
    Also refer
    http://help.sap.com/saphelp_nw2004s/helpdata/en/c6/6f1741b393f26fe10000000a1550b0/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/f4/67b340be3dff5fe10000000a155106/frameset.htm
    Also check what user is maintained via transaction SLDAPICUST. and carefully enter the password, also check that if user is locked.
    Hope this will help you a bit.
    Regards
    Aashish Sinha

  • Use Profile to Delete Existing Settings

    Is there any way that Profile Manager can be used to delete or remove existing settings on an iOS device?
    For example, we will be migrating to a new mail server soon. I would like to use Profile Manager to send out a profile to all user iOS devices to add the new mail account AND remove the previous mail account.
    I would also like to remove previous Calendar accounts and subscriptions as well as remove a Contacts account.
    I cannot find anywhere in Profile Manager that it seems to allow for the removal, deletion or replacement of any existing settings. Is this just not possible with Profile Manager?
    If this is not possible, what have others done in this situation to get the devices 'cleaned up'?
    I understand that I am coming into a situation where the iOS devices were manually configured initially and now will have a profile installed. If I were to start fresh with iOS devices that were based on an initial profile install, would what I'm looking for be possible then? In other words, if the Mail/Calendard/Contact accounts were initially created/added via a profile, would modifying that initial profile (ie. removing the initial accounts) result in those accounts being removed on the iOS devices?
    Thanks for any help as I get oriented to Profile Manager.
    Specs: Profile Manager 2 from Mac OS X Server 2.11 running on Mountain Lion 10.8.2.

    You can't remove or edit any settings that you haven't pushed a profile out for
    If you've manually configured mail cal  etc PM can't edit or delete it
    It will add another mail account cal account etc alongside the existing manual ones controlled by PM
    If you want rid of the old manual mail, cal settings your going to have to touch each device and delete them
    Your going to have to touch each device anyhow to get the devices  enrolled in PM if you have not already done so
    If the devices were manually configured you won't have any profiles installed on the devices
    Profiles appear in general, profiles xx number of profiles installed
    Deleting these profiles will remove the settings
    Yes with PM you can remove edit or add settings and push these out to devices, lock wipe etc
    You'll need to open the appropriate ports and forwarding if your going to push settings out to devices that maybe outside your LAN
    What I do is use apple Configurator to do a basic configuration with a profile to get the devices on my enrolment wifi
    Install server certs and auto enrol the devices in PM to speed things up
    PM is configured with user and device profiles for mail wifi VPN etc
    Using apple Configurator speeds up the process, less time spent tapping away
    If you use the default "settings for everyone" group in PM it's a user opt in download it's not pushed

  • Over-the-Air configuration using SMS

    Hi community, does the Nokia N9 support over-the-air configuration using SMS?
    Tx in advance,
    Xose

    Hiya Folks,
    Looks like I either gave the wrong location (possible) or the document was changed (possible).
    Here is what I have:
    - IPCU Help
    help.apple.com/iosdeployment-ipcu/mac/1.0/
    Some of the information that is in the MDM Protocol Reference that I found before is here.
    Also some of the information from the Configuration Profile Reference.
    - Deploying iPhone and iPad Mobile Device Management
    images.apple.com/iphone/business/docs/Mobile_Device_Management_9_2012.pdf
    - Mobile Device Management Protocol
    adcdownload.apple.com//Documents/mobile_device_management_protocol/mobiledevicem anagement_121211.pdf
    No Longer Available. I get an error.
    - Configuration Profile Reference:
    developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/i PhoneConfigurationProfileRef.pdf
    - iPhone and iPad in Business Deployment Scenarios
    images.apple.com/iphone/business/docs/iOS_6_Business_Sep12.pdf
    - iOS 6 Security
    images.apple.com/iphone/business/docs/iOS_Security_Oct12.pdf
    - Deploying iPhone and iPad Digital Certificates:
    images.apple.com/iphone/business/docs/iOS_6_Certificates_Sep12.pdf
    - Deploying iPhone and iPad Security Overview:
    images.apple.com/iphone/business/docs/iOS_6_Security_Sep12.pdf
    - iOS 6 Security
    images.apple.com/iphone/business/docs/iOS_Security_Oct12.pdf
    - Deploying iPhone and iPad Apple Configurator
    images.apple.com/iphone/business/docs/iOS_6_Configurator_Sep12.pdf
    Without verifying or validating specifics, my initial thought is that the first one is the closest to what *was* the Mobile Device Management Protocol Reference.
    I also think that MDM is still a moving target with Apple and they are still trying to figure out what they want to have available and how it should be made available.
    I hope it helps.
    -KA-

Maybe you are looking for