Step by step MDM configuration?

err you still have to enter itunes password if your pushing apps out

regardless of MDM.the apps have to be authorized on the device

even VPP

personally I think your making a mistake not using a real domain name on the server

and setting it up for both inside and outside IOS management.

you don't have to use it but it's there if needed later

rather than having to start all over again

when you say supervise ipads I'm not sure if you can both supervise (apple configutor)

and use a MDM solution, I would think not

I use apple configurator to update IOS if needed, install Auto enrollment profile

enrollment wireless and MDM trust cert.

in apple configutator you should have auto join device enrollment, trust cert, whatever profile your using to install wireless profile

if the device is enrolling automatically

you'll get prompted to install profiles on the device

and the device will appear in PM

this is without visiting the device enrolment website

after successful enrollment you should have

trust cert

remote management

whatever profile name you used to add the enrollment wireless (from apple configurator)

then I push everything from the MDM, user settings, device setting user wireless etc.

the enrollment wireless is for enrolling devices only

if depending on what profies a user deletes I can use enrollment wireless to push settings back out

if needed. once enrollment wireless is turned off the devices will join the correct pushed user wireless

Last time I looked at apple configurator Supervising iOS devices with apple Configurator "binds" them to the machine that was used to supervise them

you can't manage them with another machine or a mdm as far as I'm aware

Sorry i didn't explain the app authorisation fully

The reason your able to push apps out is you've already authorised them

With an iTunes account and password same thing applies to the MDM

Once you've authorised an app that authorisation you've done allows other apps to be installed

Providing your using the same iTunes account

You might find problems if users try to install /sync apps on the devices with iTunes on a machine and a users personal iTunes account

This seems to cause an authorisation conflict. the users iTunes on their computer will not have authorisation for the apps you've pushed

And the pushed apps will be disabled and will not open

If the users only update and install apps on the device it's self you won't have this problem

You may also come across a similar thing when authorisation expires I'm not sure what the phone home time limit is on apps

I'm not sure if this behaviour is still inherent in iOS 6.xx I'm yet to update the majority of iOS devices

I have only updated some test devices

It's relatively easy to fix if it does happen, just delete one of the apps installed on the corp iTunes account

And reinstall it, that will re authorise the apps

Pushing out apps from the mdm requires user input, each app has to be OK'ed by the user

They will see a popup window with server name wants to install bla bla OK cancel, or words to that effect

Something doesn't sound right if your auto enrolment works sometimes and not others

auto enrolment you have to enable it in profile manager

And get the auto enrolment profile into apple Configurator if that's not there auto enrol won't work

There are also restrictions you can apply to enrolment process which maybe effecting you

And sometimes the enrolment process can go awry if it does remove the device from PM if it's there

And removal all profiles and start again

Re your PM profile not sending

Do you have the correct ports open

And server push iTunes account working

Is the server able to phone home to apple

Have you checked out MokiMobility? With our platform, we are able to leverage the technology of Apple Configurator and give you full control to push and remove apps. Not only control the app/content that is being displayed on the iPad, but also give you the ability to monitor the iPad itself, i.e. battery life, wifi connectivity, push apps to the device, security, and even physical location of the iPad.

Let me know if you want to check it out and I can do an online demo for you.

<Personal Information Edited by Host>

I already configured some iPads with "Configurator" and put them under supervision. Configurator created a self signed certificate and put it under the "Supervision Profile" on every iPad. When u look at the expiration date of the certificate you can see that it will expire exactly after one year after installation of "Configurator", the day when the self signed certificate was automatically created by "Configurator".

I plan to configure the iPads over the air with a MDM and I wont have access to the devices after deployment anymore. What will happen after one year once the self signed certificate of the "Supervision Profile" expired, will I still be able to change setting via MDM for which supervison mode is needed and push new profiles to the devices?

How can I renew the certificates within the "Supervision Profile", seems like "Configurator" doesnt do that automatically?

A cookbook approach.

Excellent guide. See announcment post -- https://discussions.apple.com/thread/4256735?tstart=0

https://docs.google.com/document/d/1SMBgyzONxcx6_FswgkW9XYLpA4oCt_2y1uw9ceMZ9F4/ edit?pli=1

Hi Smutho,

My certificate expired 4 days ago. I can manage ipads by MDM. Do you know how date of certificate is renew in Configurator ?