Controlling Apple devices and Mac for USB debugging

Question

abmmanager Author

Level 1

8 points

Controlling Apple devices and Mac for USB debugging

Hello Team,

I have two types devices added to the ABM account for making them supervised mode with Mobile Iron

Devices added using Apple configurator
Devices added from Vendor side so no need to use Apple configurator.

I have 30 mac machines that needs to be used for development with these above 2 types of devices.

I "dont want to connect these devices" to personal mac machines other than these 30 only.

Problem : The settings in Apple configurator to allow devices to pair with configurator host only makes this achieved, but this also make me compromise the Supervising identity to be put to all 30 machines which is not required I feel. Now they all become powerful.

The type 2 devices were never used with Apple configurator hence the devices needs to do change the settings in Mobile Iron policy to connect to non-configurator host (This now opens the device to personal mac also other than 30).

Can advise how ABM can handle the whitelisting and is there something I am missing to have a common cert between 30 machines and these devices to show "Trust" prompt on 30 macs only. Cant go ahead due to this issue to make productive development.

Appreciate any leads given.

ABM manager.

iPhone X

Posted on Jul 23, 2020 8:05 PM

Reply

Answer 1

celliott147

Level 6

12,212 points

Jul 24, 2020 6:06 AM in response to abmmanager

Apple Business Manager is not an MDM. You should be able to do all you want on the fly using Mobile Iron. If you need to connect a iOS device to one of the 30 macOS devices, you can allow pairing with non-configurator hosts in the MDM as needed on a device by device basis, and then revoke that permission when done.

Reply

Answer 2

abmmanager Author

Level 1

8 points

Jul 28, 2020 9:36 PM in response to celliott147

Thanks for the reply Celliott147 , the issue is when the Mobile Iron is checking this option , it not only enabled the device (supervised IOS iPhone) to my office laptop but also my personal mac book, I want to block the mac book so there is something I am looking to have a common cert/something in iPhone that validates with my office laptops only and as it wont be there in my personal mac it will not pair. Any inputs regarding this.

Reply

Answer 3

abmmanager Author

Level 1

8 points

Aug 31, 2020 9:56 PM in response to celliott147

Hi Celliott147,

Quick question on this, if I am able to do all devices manually with Apple Configurator and to make them USB enabled only on the whitelisted few machines in bank, I use the supervising identity and Apple Configurator installed on all those machines only so my "Allow configurator host to usb connect" settings policy can work (This is possible only via Apple Configurator and not mobile iron). Now problem is all machines are like copies of my configurator host, Is there a way I can let that be but avoid the developers not tamper the phone and override profiles that i used with one machine. This is because I can fix the issue to make whitelisting to few devices and other device show Policy prohibited error which is correct, but this also makes the copies of configurator host powerful to override the settings which i don't want these machines to change.

Any inputs ?? really appreciated.

Reply

Answer 4

celliott147

Level 6

12,212 points

Jul 30, 2020 9:06 AM in response to abmmanager

This is not possible at this time.

Reply

Controlling Apple devices and Mac for USB debugging

Similar questions