Deploy iOS Applications

Solved Locked
JH
Jonny Hill
Paragon Fleet Solutions Ltd

We are looking to deploy iOS Applications to our managed iOS Devices. We currently do this well on Android, but this is the first time we have attempted on iOS.

As per Android, we create a package from the APK file and upload into Mobicontrol console. This package then gets included into a profile which is assigned to devices and the application is automatically installed. What would be the similar process for iOS as I cannot find the relevant documentation for this?

I have an enterprise application IPA file. I have created an Application Catalog Rule, added this application as a mandatory application and assigned to the relevant devices.

From the end user device sense, how do I access this application? Do we need to add a webclip to the Application Catalog and it is downloaded from there? I am also unsure of my Application Catalog URL.

Any help on this would be greatly appreciated.

6 years ago
SOTI MobiControl
ANSWERS
RC
Raymond Chan Diamond Contributor
6 years ago

You should have a default web-clip for starting app catalog on your device homescreen.  Then any enterprise app (.ipa uploaded to MobiControl server) or Apple store apps defined in your app-catalog rule(s) will be listed in the app catalog on the device.  For app-catalog 's apps marked as "suggested",  end-user of unsupervised device have to manually click the item in the app-catalog to initiate installation.  For those apps marked as "mandatory", end-user should receive prompt for installation (This is the expected behaviour I saw a few years ago, but I haven't checked if there is any change in latest iOS or MobiControl version for quite some time because I could successfully persuade most of my customers in the last couple of years  to use supervised mode and DEP/VPP).

Solution
RC
Raymond Chan Diamond Contributor
6 years ago

Are your iOS devices in supervised mode or under Apple's DEP/VPP program?

JH
Jonny Hill
6 years ago

Hi Raymond, thanks for the reply. The devices are not in Supervised mode, nor enrolled under DEP. I'm guessing here lies my problem? If we are not set up for DEP, do managed devices need to be in Supervised mode to have access to additional administrative control such as deploying apps etc? From my understanding, devices are erased when placed in Supervision mode.

RC
Raymond Chan Diamond Contributor
6 years ago

If iOS device is not in supervised mode,  SILENT PUSH of application will not be possible.  In other words,  each application installed will result in device end-user being prompted, and will not proceed without the end-user consent.

You are right that switching an iOS device into/out of supervised mode needs factory reset of the device.  Please note that any FULL-DEVICE back-up via iTune to a PC/MAC computer following by configuring supervised mode and subsequent restoring the back up image back onto the device will not work.  The device will just return back to non-supervised mode after the back-up image restoration.  The only way to have successful full-device back up  and subsequent restoration & supervised-mode configured is via iCLOUD.  However, most governmental and commercial organization will not accept such procedure due to possible data leakage risk once the full set of data has been backed up on the cloud.

JH
Jonny Hill
6 years ago

Thanks for your prompt reply. All understood.

What would be the process to deliver applications to unsupervised devices then? This would work as a temporary measure for us and allow the users to download and install the application after being prompted.

As mentioned in the original post, I have created an Application Catalog Rule with the enterprise application included, but not seeing anything from an end user sense. Should the application catalog appear within the Mobicontrol Agent?