iOS enterprise
-
Upload
dominion -
Category
Technology
-
view
1.553 -
download
1
description
Transcript of iOS enterprise
Presenter: René Winkelmeyer Company: midpoints | purify it
iOS devices in the enterprise
• René Winkelmeyer
• Senior Consultant at midpoints | purify it
• IBM Design Partner for Notes/Domino NEXT
• IBM Design Partner for Mobile
• OpenNTF projects
• File Navigator (http://filenavigator.openntf.org) • Social Enabler (http://socialenabler.openntf.org)
• Contact • Skype/Twitter/LinkedIn/Facebook: muenzpraeger • http://blog.winkelmeyer.com • [email protected] / [email protected]
About the speaker
• midpoints | purify it (http://www.midpoints.de)
• IBM Advanced Business Partner
• Apple Enterprise Developer Partner
• we mobilize notes
• IBM Lotus Traveler administration add-ons
• IBM Lotus Traveler deployments
• E-Mail-Management consulting
• Notes/Domino, RCP, XPages development
About the speaker
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM
Agenda
let‘s see demos for that
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM
Agenda
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
Why do YOU need to be engaged?
You‘ve got iOS devices and your users want mail (and more)!
Be the king!
Why do YOU need to be engaged?
Mobile devices mean: configure the device manually.
Everything: VPN, Mail, WiFi and so on.
And what about security?
And about „BYOD“?
Why do YOU need to be engaged?
Step 1: Define standards
Step 2: Configure policies
Step 3: Device Enrollment
Step 4: Manage devices
Why do YOU need to be engaged?
Step 1: Define standards
Step 2: Configure policies Configuration profiles Step 3: Device Enrollment OTA Enrollment Step 4: Manage devices Mobile Device Management
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM
Agenda
Using iOS devices with Lotus Traveler
• Till now you need to activate ANY iOS device via iTunes (activate mode)
• see the “iPhone Enterprise Deployment Guide”, Chapter 4
• BUT
• there are serious rumors, that Apple will implement OTA-Activation with iOS 5 !!!
Using iOS devices with Lotus Traveler
• IBM is leveraging the ActiveSync protocol for syncing mail, calendar and contacts, which is implemented per default on any iOS device.
• “Normally” your users need to use the Traveler server and their http username and password to authenticate – and to install the “configuration profile”.
Using iOS devices with Lotus Traveler
Using iOS devices with Lotus Traveler
Using iOS devices with Lotus Traveler
• IBM Lotus Traveler does NOT solve ALL of you’re administration and security requirements like
• realtime black- and whitelisting on a device basis
• distributed administration (allow local administrators or the 1st level suppurt access to the Traveler server)
Using iOS devices with Lotus Traveler
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM
Agenda
iOS enterprise capabilities
• Traveler does NOT serve YOUR requirements for a real enterprise deployment.
• IMHO it’s not the job of IBM to deliver it.
• The good news: Apple is (the only!) hardware provider which has currently real good configuration capabilities for their devices.
• The bad news: They don’t have an enterprise-ready software for that.
iOS enterprise capabilities
• For small environments you may use the “iPCU” – the iPhone Configuration Utility (despite the name it’s although for any iOS device).
• You can create profiles with it.
• But you don’t get a real OTA deployment.
iOS enterprise capabilities
• A “profile” is a XML file, which follows the plist DTD. They file extension is “.mobileconfig”.
• Those settings can be
• Mail settings: Exchange Traveler, IMAP, POP3
• Certificates
• VPN
• WiFi
• Passcode
• Restrictions
• …
iOS enterprise capabilities
iOS enterprise capabilities
• You can deploy those iPCU profiles via
• USB
• HTTP download
• For a secure deployment they should be encrypted and signed!
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
iOS enterprise capabilities
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM
Agenda
Over-The-Air deployment & MDM
Over-The-Air deployment & MDM
D E M O
7. Confirm installation
6. Profile installation 6. Profile installation
5. Individual encrypted profile 5. Individual encrypted profile
3. Identify device 3. Identify device
2. Login 2. Login 1. Open URL 1. Open URL
Profile Service
4. Enroll Identity (SCEP)
Certificate Authority
4. Enroll Identity (SCEP)
Over-The-Air deployment & MDM
• Mobile Device Management allows you
• transparent OTA management of your iOS devices (through HTTPS)
• Remote commands
• Install/remove profiles seamless
• Lock / erase device
• reset passcode
• Queries
• Network information
• Device information
• App information
Over-The-Air deployment & MDM
4. Bind to MDM server 4. Bind to MDM server 3. Install MDM Profile 3. Install MDM Profile
2. Create MDM Profile 2. Create MDM Profile
1. OTA Enrollment 1. OTA Enrollment
Notification Service
MDM Server
Initial setup
Over-The-Air deployment & MDM
Over-The-Air deployment & MDM
D E M O
4. Queries + commands via Profile-Payload
Notification Service
4. Queries + commands via Profile-Payload
3. Connect to MDM 3. Connect to MDM 2. Device notification 2. Device notification 1. Send MDM Push 1. Send MDM Push
MDM Server
Active Management
Over-The-Air deployment & MDM
• iOS devices are enterprise ready.
• YOU need device management to have a valuable and secure iOS experience.
• Get the most out of you business with iOS devices, OTA and custom applications. It’s really worth!
Conclusion
Conclusion
Thank you!
If I’m not overdue: let’s switch to Q&A!
• René Winkelmeyer • Skype/Twitter/LinkedIn/Facebook: muenzpraeger • http://blog.winkelmeyer.com • http://www.xing.de/Rene_Winkelmeyer • [email protected] / [email protected]
• midpoints | purify it • http://www.midpoints.de • [email protected]
Contact
• iTunes deployment • http://images.apple.com/iphone/business/docs/iPhone_iTunes.pdf
• Device Deployment • http://images.apple.com/iphone/business/docs/iPhone_Business.pdf
• Security • http://images.apple.com/iphone/business/docs/iPhone_Security.pdf
• Mobile Device Management • http://images.apple.com/iphone/business/docs/iPhone_MDM.pdf
• Certificates • http://images.apple.com/ipad/business/docs/iPad_Certificates.pdf
Resources