Configurator

With the release of iOS 6, Apple will offer business users a range of new features. A few of which are VIP email filtering (already in Mountain Lion) with custom notifications, more options when declining a phone call on the iPhone, much-needed privacy options, and Apple’s new Do Not Disturb feature – which should help some mobile professionals to “switch off” after work and maybe even get a good night’s sleep.

iOS updates are generally designed to be user-friendly and easy enough that anyone can manage to install them. As with any major OS or business critical software upgrade, however, there may be unforeseen issues with iOS 6 – particularly when it comes to internal iOS apps and iOS access to enterprise systems.

An iOS 6 upgrade policy and strategy is something that every IT department should have in place before Apple releases iOS 6. For businesses that actively support user devices in the workplace through a BYOD (bring your own device) program, that upgrade strategy is even more critical.

It’s been over two years since Apple unveiled iOS 4 with mobile management features designed to make the iPhone and iPad a significantly better corporate citizen. During those years, the landscape of business and enterprise mobility has changed dramatically. RIM has collapsed and will never truly recover, Microsoft has doubled down on the interface it launched late in 2010 with no guarantee of success, and Android has become much more enterprise friendly. Perhaps more important is the fact that idea of mobile management and security has shifted from a focus on devices to a focus on securing data and managing mobile apps.

As all this has happened, Apple’s mobile management framework, which is the system that all mobile management vendors plug into in order to secure and manage iOS devices, has essentially stagnated. With iOS 6 on the horizon, lets look at the areas that Apple needs to address if it wants iOS to remain one of the preferred mobile platforms for business.

According a study released earlier this month, Apple’s iOS is becoming the most popular platform for enterprise app development – with 53.2% of developers picking iOS for corporate app development compared to 37.4% of developers standing behind Android. RIM’s BlackBerry, the old guard of enterprise mobility, came in a distant fourth behind Windows Phone with only 2% of developers supporting it.

That’s great news for Apple and the iPhone and iPad in business and enterprise environments. Apple even makes enterprise distribution possible outside of the App Store. Mobile App Management (MAM) and enterprise app store solutions provide efficient and effective distribution and update methods for enterprise apps.

Business to business (B2B) apps and solutions, however, present a different kind of challenge – one for which Apple has a solution, even if it isn’t a perfect solution.

Apple’s Volume Purchase Program (VPP) is the company’s half-hearted attempt to deliver some form of enterprise licensing program for the iOS App Store. The program does make it marginally easier for businesses to bulk purchase and deploy apps to iPhones and iPads than telling employees to buy apps and then reimbursing them, but it still leaves a lot to be desired. As we reported earlier this summer, many businesses and school still feel Apple doesn’t meet their app purchase and deployment needs.

Mobile app management (MAM) vendor App 47 summed up some of the key issues and how it can help companies deal with them as part of the company’s summer lecture series on app management.

Apple released a range of updates to the its Mac applications last week along with the release of Mountain Lion on Wednesday. Most of those updates were to integrate new Mountain Lion technologies and provide general compatibility with the new OS.

Among them were updates for  Apple Remote Desktop, Apple’s extremely powerful and flexible remote management solution for Mac systems. In addition to offering support for Mountain Lion, the update also added a couple new features focused around some of Apple’s latest hardware, but no major changes. In fact, one has to wonder why this amazing Mac IT solution has gotten so few updates over the past few years.

The Opus hotel in Vancouver made a somewhat shocking announcement last week. The hotel was ripping the landline phones out of its rooms and replacing them with iPhones. While that seems extravagant, it’s actually a rather brilliant plan.

The hotel, which already offers guests an iPad that can act as a concierge service, points out that offering guests, particularly international guests, an iPhone adds a lot of value. In addition to the value for customers, Apple’s free iOS management tools could make implementing such a program simple and relatively inexpensive – beyond the cost of the iPhones themselves anyway.

Apple quietly updated its Apple Configurator utility that businesses and schools can use to manage iOS devices. The update brings with it relatively little new functionality to the free tool. Instead it focuses mainly on reliability and performance improvements. The update does, however, introduce some options for handling user content and user-installed apps.

One of the ways that working in education is different from almost any other industries is the annual summer break. The summer break let’s schools and districts tackle large projects in ways that simply aren’t possible in other fields. Deploying a brand-new network, building an expansion, and taking part in professional development programs are just a few examples.

With the end of the school year, Apple is taking the opportunity to remind schools and educators about a free professional development program that it’s offering. Called the Tune In Series, the program is a series of webcast events covering the iPad and many of the technologies that Apple introduced during its education event in January. The series is running every week through the end of August.

May is Mobile Management Month at Cult of Mac, where we will be profiling a different mobile management company every weekday. You can find all previous entries here  and read our Mobile Management manifesto here.

JAMF specializes in Apple management technologies. The company Casper Suite is a full featured Mac client management solution as well as an iOS device management product. Being devoted specifically to Apple technologies, JAMF is able to include features not found in other products at this time including the ability to integrate with Apple’s enterprise sales and warranty system known as GSX, the ability to distribute ebooks to iOS devices, and deployment workflows that integrate with Apple Configurator.

While Casper Suite is an excellent option for organizations that are predominantly or completely Apple-based, organizations with a mix of desktop and mobile platforms may find the product somewhat limiting. In addition to Casper Suite for Mac and iOS management, JAMF also offers Mac enterprise deployment and asset management tools. Finally, it’s worth noting that JAMF offers significant licensing discounts for education institutions implementing Casper Suite. 

Apple has released the first update for its free iOS Apple Configurator tool. Configurator, which we’ve covered in-depth since its release last month, allows organizations to mass configure and deploy iPads. The software works best as a stand-alone management solution for iOS devices that are shared among multiple users but it can also be part of a wider mobile management strategy.

The update includes a handful of bug fixes as well as a couple or major changes to the ways that Configurator works with app and ebook purchases.

Recently, we’ve been highlighting some of the major partnerships that are beginning to form between mobile management and mobile/cloud services vendors. These partnerships are strategic and aim to enable IT workflows that better secure, support, and monitor iPhones, iPads, and other mobile devices than what any one company could offer. So far, these partnerships and the integration of solutions that they offer haven’t included Apple or the basic management tools that Apple makes available for free – until now.

Mac and iOS management provider JAMF has posted a guide to integrating the company’s signature solution with Apple’s free Configurator tool to streamline iOS deployment.

There are a number of fields and professions in which mobile professionals share a pool of mobile devices. For companies with field agents, sales people, and marketing professionals, the need for each user to have a dedicated device may not be the most economical option and a better approach can be to simply configure a number of iPads with similar specs that users or teams can check out when they go on the road.

This shared iPad model can be  a way to implement the iPad while reducing overall expense. One challenge, however, is that a business typically needs to provide mobile Internet access for individuals or small teams – something that can be a pricey proposition.

One of the mobile news items this week was the discovery by developer Gareth Wright of a vulnerability in the Facebook apps for both iOS and Android. At issue in the iOS version of the Facebook app is the fact that a user’s login data is stored in a clear text .plist file. Copying that file to another device will allow full access to a person’s Facebook account.

Facebook was quick to point out that this file could only be copied directly from an iOS device if the device had previously been jailbroken. Wright responded by saying that the portion of the iOS file system where the data is located can be accessed by connecting any iOS device (jailbroken or not) to a Mac or PC running iTunes and creating a backup. With the right tools, its fairly easy to search an iOS device backup or even the filesystem on a connected device.

This brings up an important issue for businesses deploying iOS devices or operating a BYOD program – iOS backups made through iTunes can be an attack vector to retrieve business data.

Yesterday’s news that RIM is looking to hire iOS developers with the intention of creating iOS apps unleashed a lot of speculation about what the BlackBerry manufacturer might be planning to release for iPhones and iPads. After initially being tight-lipped and refusing to comment on the job posting, RIM’s PR team revealed that its iOS app development plans center around its BlackBerry Fusion product.

BlackBerry Fusion is RIM’s new mobile device device management solution. The product, which RIM launched earlier this year along with the first major update to its PlayBook tablet’s OS, can manage BlackBerry and PlayBook devices. RIM plans to and support for managing iOS and Android devices as well.

RIM’s statement was pretty vague beyond confirming that it’s new management solution will be the focus of this position, leaving room for speculation as to what additional features an on-device app will enable under RIM’s new management console.

For many IT shops, the iPad and/or the iPhone can be a conundrum. While iOS has built-in enterprise capabilities, they may not be immediately apparent. There’s also the fact that Apple doesn’t act the same way as most enterprise vendors. Apple does offer enterprise sales and support teams, training and certification programs, and a solid selection of enterprise-related resources, but rarely promotes them. This can be disorienting and frustrating to most IT professionals.

Often there’s a sense of urgency around getting iOS devices integrated securely that adds to this stress – it can be because executives want them, users are bringing them in and doing work on them already with no regard for IT or policies, or because there’s been a decision to offer iPads to specific users or groups.

The ideal beginning when faced with this prospect is to take a deep breath and then to begin breaking down the issues that need to be addressed and prioritizing and handling them. As with other major IT projects, you’ll probably need to develop stop-gap measures to keep things running until your final solution is ready to be rolled out.

Virtually everyone who’s ever used an Apple product has an Apple ID. This user account for all things Apple is most commonly used with the iTunes Store and the iOS and Mac App Stores. It’s used to both authorize purchases and to allow you to access content or run apps after they’re downloaded. Apple’s philosophy is that every person should have their own Apple ID and that each of us should use our individual Apple ID (and only that Apple ID) on each of our devices – iPads, iPhones, iPods, Macs, even PC’s running iTunes or other Apple software.

That’s a great concept, but it creates a big challenge when iOS devices are used in business or school environments. When someone configures an iOS device for an employee or student with a selection of apps and other content (like iBooks 2 textbooks), they need to use an Apple ID. But once that device is deployed, the end user may need or want to purchase additional apps or other materials.

This is often a stumbling block for business-owned devices. And it’s something that Apple has finally begun to address with Apple Configurator.

One of the first things most IT folks will think about Apple Configurator is that it’s pretty limited compared to some of the mobile device management suites on the market (including Apple’s Profile Manager in Lion Server). MDM suites are designed to make device management as easy, automatic, and wireless as possible. Most include robust monitoring and reporting features – virtually all can use Apple’s push notification system to update a managed device at any time.

Configurator, on the other hand, requires connecting each iOS device to a Mac using a USB cable to perform any administrative tasks like configuring device settings, assigning a device to a user, installing apps, or updating iOS. That means that Configurator isn’t appropriate for a lot of businesses or workplace situations. Yet, for some organizations, Configurator is a more ideal tool than most MDM suites because of its hands-on approach.

So, what kinds of environments is Apple Configurator suited to?

One short sentence in the help documents for the new Apple Configurator tool shows that the company is aware that many workers are bringing their personal devices into the office. More noteworthy is the fact that it shows that Apple is thinking about some of the potential privacy issues that can arise in situations like BYOD programs where a personal iPhone or iPad is managed by a company’s IT department.

The sentence in question is in the section on supervised or managed devices. It reads as follows:

Important: When a device is initially supervised during the Prepare process, it’s wiped of all content and settings. This prevents a person’s personal device from being supervised without their knowledge.

Continue reading

Apple Configurator is a new free tool that let’s you manage iOS devices in business or education settings. The app can be used simply as an initial deployment tool or as an ongoing management solution. It’s particularly well suited to environments where iPads and other iOS devices will be shared among multiple users since it can be used in “lending library” fashion with users checking out devices because Configurator backs up user data on check-in and applies to a new device on check-out.

This guide covers each part of Configurator  with step-by-step instructions.

A common complaint that I heard earlier this week at the CITE conference in San Francisco was that Apple wasn’t a “real” enterprise vendor. IT professionals have whined and moaned about the fact that Apple doesn’t behave like most enterprise vendors for years (as a long time Mac and Apple IT professional myself, I’ve probably muttered under my breath about Apple’s approach to the enterprise many more times than most of the CITE attendees). What’s changed, however, is that CIOs and other IT leaders can no longer simply say “no” anytime Apple or an Apple product is mentioned.

This week, Apple even reiterated the point by dropping Apple Configurator, a completely new free tool for managing iOS devices in business. It’s a tool that offers new workflows when it comes to how businesses work with iPads (and to a lesser extent iPhones) and Apple released without telling its mobile management partners or its enterprise customers.

To all those IT folks bitching and complaining that Apple doesn’t publish 18-month roadmaps and doesn’t reach out to every enterprise months in advance of a product upgrade or cancelation, I have to say this: deal with it.