COMPANION eBOOK SEE LAST PAGE FOR DETAILS ON $10 EBOOK VERSION Shelve in Mobile Computing User level: Intermediate www.apress.com BOOKS FOR PROFESSIONALS BY PROFESSIONALS ® E nterprise iPhone and iPad Administrator’s Guide answers the questions raised in executive offices, IT departments, and IT industry magazines across the world about whether or not the iOS-based devices are meant to be leveraged in enterprise environments. The definition of what is considered enterprise qual- ity ranges wildly from environment to environment. iOS is already in the enter- prise, so whether or not they are ready, IT departments need to adapt for them. Written by Charles Edge, author of a number of other titles on the Mac OS X systems administration platform, the Enterprise iPhone and iPad Administrator’s Guide assumes that you may have never touched an iOS-based device before. Because many administrators of Blackberry Enterprise Server do not actually use a Blackberry, having the device at hand is not required (except for test- ing). Rather, this book looks at the management en masse of these devices and strategies to provision, deploy, secure and manage iPhone, iPod touch and iPod. Whether you are attempting to remediate existing devices into a new support paradigm or trying to prepare for a new deployment, the strat- egies, steps and procedures layed out in this book will guide you to success. Over the course of this book, Enterprise iPhone and iPad Administrator’s Guide looks at different environments and different technologies used by Apple. These include: • Basic use of iOS • Building configuration and provisioning profiles for mass deployment • Using MDM to manage devices • Supporting and troubleshooting devices • Microsoft Exchange integration • Leveraging existing network environments Enterprise iPhone and iPad Administrator’s Guide Charles Edge Strategies for iOS Deployment, Integration, and Control Edge Enterprise iPhone and iPad Administrator’s Guide Companion eBook Available www.it-ebooks.info www.it-ebooks.info i Enterprise iPhone and iPad Administrator’s Guide ■ ■ ■ Charles Edge www.it-ebooks.info ii Enterprise iPhone and iPad Administrator’s Guide Copyright © 2010 by Charles Edge All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher. ISBN-13 (pbk): 978-1-4302-3009-0 ISBN-13 (electronic): 978-1-4302-3010-6 Printed and bound in the United States of America 9 8 7 6 5 4 3 2 1 Trademarked names, logos, and images may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, logo, or image we use the names, logos, and images only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights. President and Publisher: Paul Manning Lead Editor: Clay Andres Development Editor: James Markham Technical Reviewer: Edward Marczak Editorial Board: Steve Anglin, Mark Beckner, Ewan Buckingham, Gary Cornell, Jonathan Gennick, Jonathan Hassell, Michelle Lowman, Matthew Moodie, Duncan Parkes, Jeffrey Pepper, Frank Pohlmann, Douglas Pundick, Ben Renow-Clarke, Dominic Shakeshaft, Matt Wade, Tom Welsh Coordinating Editor: Kelly Moritz Copy Editors: Sharon Wilkey, Heather Lang, Mary Ann Fugate Compositor: MacPS, LLC Indexer: BIM Indexing & Proofreading Services Artist: April Milne Cover Designer: Anna Ishchenko Distributed to the book trade worldwide by Springer Science+Business Media, LLC., 233 Spring Street, 6th Floor, New York, NY 10013. Phone 1-800-SPRINGER, fax (201) 348-4505, e-mail orders-ny@springer-sbm.com, or visit www.springeronline.com. For information on translations, please e-mail rights@apress.com, or visit www.apress.com. Apress and friends of ED books may be purchased in bulk for academic, corporate, or promotional use. eBook versions and licenses are also available for most titles. For more information, reference our Special Bulk Sales–eBook Licensing web page at www.apress.com/info/bulksales. The information in this book is distributed on an “as is” basis, without warranty. Although every precaution has been taken in the preparation of this work, neither the author(s) nor Apress shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work. www.it-ebooks.info iii To my darling wife and my sweet little girl www.it-ebooks.info iv Contents at a Glance ■Contents v ■About the Author xi ■About the Technical Reviewer xii ■Acknowledgments xiii ■Introduction xiv ■Chapter 1: The Inevitability of the iPhone in the Enterprise 1 ■Chapter 2: Purchasing and Activating 13 ■Chapter 3: Applying Basic Configurations to Mobile Devices 33 ■Chapter 4: Integrating with Groupware 71 ■Chapter 5: Working with Documents and Files 101 ■Chapter 6: Remote Access for iOS 139 ■Chapter 7: Developing In-House Applications 171 ■Chapter 8: Building Configuration Profiles 191 ■Chapter 9: Mass-Deploying Devices 217 ■Chapter 10: Leveraging Third-Party Solutions for Productivity 267 ■Chapter 11: Developing A Program For Support 289 ■Appendix A: Acceptable Use Policy 311 ■Appendix B: Using Mac OS X Server for Groupware 317 ■Index 357 www.it-ebooks.info v Contents ■Contents at a Glance iv ■ About the Author xi ■ About the Technical Reviewer xii ■Acknowledgments xiii ■Introduction xiv ■Chapter 1: The Inevitability of the iPhone in the Enterprise 1 Three Devices, One Platform 2 Welcoming Change While Protecting the Enterprise 4 Sandbox 5 Long-Term Implications 5 Mobile Integration Strategies 6 The Paradigm Shift 7 Impact to Infrastructure 7 Integration with the Enterprise 9 Summary 11 ■Chapter 2: Purchasing and Activating 13 Making Large-Purchase Considerations 13 Preparing the Pilot 14 Purchasing Applications 15 Understanding the License Agreement 15 Purchasing in Bulk 16 Managing Activations 17 Using StoreActivationMode 17 Using StoreGeniusMode 18 Activating Devices 19 Getting Started 19 Synchronizing for the First Time 20 Choosing Synchronization Options 21 Developing Organizational Policies 23 www.it-ebooks.info ■ CONTENTS vi Using the App Store 23 Managing iTunes 24 Registering Devices 26 Backing Up and Restoring Devices 26 Placing Devices Back into Production 28 Upgrading the Software 29 Summary 31 ■Chapter 3: Applying Basic Configurations to Mobile Devices 33 Getting Familiar with iOS 4 34 Setting Wireless Network Connections 35 Configuring Wireless Network Settings 36 Joining a Wireless Network 37 Leveraging the Mobile Web Browser 39 Configuring the Browser (Mobile Safari) 39 Navigating Through the Browser Environment 41 Installing SSL Certificates 44 Setting up E-Mail Accounts 47 Leveraging the Cloud 49 Using IMAP, POP, and SMTP 50 Securing the Device 54 Restricting Access to Applications 54 Authenticating with Passcodes 58 Maintaining Devices 61 Performing Basic Startup Maintenance 61 Verifying Network Connectivity 62 Obtaining Updates 62 Leveraging the Logs 66 Performing Backup and Restoration 67 Bypassing the Passcode 69 Summary 69 ■Chapter 4: Integrating with Groupware 71 Integrating with Microsoft Exchange Servers 72 Ensuring a Proper Exchange Environment 72 Configuring iOS for ActiveSync 79 Using Exchange to Manage Policies 83 Managing Policies from PowerShell 86 Using Remote Wipe 87 Using Alternative Groupware Solutions 89 MobileMe 89 Leveraging the Cloud 96 Summary 98 ■Chapter 5: Working with Documents and Files 101 Sharing Files Using iTunes 102 Building a File Sharing Environment 104 Selecting Your Service 104 www.it-ebooks.info ■ CONTENTS vii AFP 105 Setting up Share Points 109 Accessing Servers With Third-Party Software 111 EZSharePro 112 NetPortal and NetPortal Lite 118 FileBrowser 122 Using iWork 124 Leveraging Public Clouds 125 MobileMe 126 Google Docs 130 Box.net 131 SharePoint 135 Summary 136 ■Chapter 6: Remote Access for iOS 139 Introducing Mac OS X Server Services 140 Configuring the VPN Client 140 L2TP 141 PPTP 143 Using the Cisco VPN Client 144 Assigning a Proxy to a VPN Connection 146 Providing VPN Services 147 Setting Up a PPTP Server 149 Setting Up an L2TP Server 152 Installing Mobile Access and Push Notification 154 Setting Up Mobile Access 155 Planning Design Considerations 156 Configuring Mobile Access 156 Starting the Service and Checking the Status 161 Controlling Access 162 Connecting Clients 164 Setting Up Push Notification for the iPhone 164 Using the Command Line to Manage Mobile Access and Push Notification 168 Summary 169 ■Chapter 7: Developing In-House Applications 171 Don’t Develop If You Don’t Have To 172 Additional Plug-ins 175 Understanding iPhone Developer Programs 176 The iPhone Developer Program 177 The iPhone Enterprise Developer Program 177 The iPhone Developer University Program 177 Getting a Developer Account 177 Xcode 179 Installing the Developer Tools 180 Using a Template 183 Planning Custom Applications 185 www.it-ebooks.info ■ CONTENTS viii Training 186 Outsourcing Application Development 187 Distributing Custom Applications 187 Accessing Enterprise Databases with the iPhone 188 Additional Resources 189 Summary 190 ■Chapter 8: Building Configuration Profiles 191 Setting Up the Tool 191 Building Configurations 193 General Tab 194 Passcode Tab 194 Restrictions Tab 196 Wi-Fi Tab 196 VPN Tab 200 E-mail Tab 201 Exchange Tab 203 LDAP Tab 204 CalDAV Tab 206 Subscribed Calendars Tab 207 Web Clips Tab 208 Credentials Tab 208 The SCEP Tab 209 Deploying Configurations Using the iPhone Configuration Utility 210 Importing and Exporting Profiles 214 Summary 215 ■Chapter 9: Mass-Deploying Devices 217 Deployment Terminology 218 Building Profiles from Scripts 218 Creating Devices 219 Creating Configuration Profiles 221 Apple’s Sample Code 222 AirWatch 223 Managing Objects in the Portal 223 Creating a Profile 228 Enrolling a Device 231 JAMF’s Casper Suite 234 Configuring Global Settings 236 Creating Configuration Profiles 242 Enrolling Devices 245 Managing Devices 252 Adding Applications to the Catalog 254 Providing Self-Service 258 KACE Appliances 259 MobileIron 261 Sybase Afaria 262 www.it-ebooks.info [...]... Inevitability of the iPhone in the Enterprise cellular provider And then there is the iPad The iPad goes above and beyond anything available on the iPod Touch or iPhone by giving you a faster processer and a larger screen, allowing for more productivity and even cooler applications But if you are reading this book, you aren’t likely interested in cool; you are likely more interested in productivity Sandbox One... ACKNOWLEDGMENTS xvi www.it-ebooks.info 1 Chapter 1 The Inevitability of the iPhone in the Enterprise Practically every conversation about integrating Mac OS X into enterprise environments tends to include the iPhone (Figure 1–1) iPhones are cool, feature rich, extensible, and can integrate with practically any existing enterprise solution The iPhone also has many features developed almost specifically for satisfying... it has a completely different chipset Most applications that run on the iPod Touch and the iPhone can run on an iPad, but not all have yet been formatted for the larger screen and therefore may have distorted text on the iPad www.it-ebooks.info CHAPTER 1: The Inevitability of the iPhone in the Enterprise Figure 1–3 iPad Not all features or tools are available on all of the devices Throughout this book,... technology conferences and the cofounder of MacTech Conference He writes a monthly column for, and is the Executive Editor of MacTech Magazine His days are currently spent on the Mac team at Google Past the technology, Ed is a husband and father and enjoys travelling and playing music xii www.it-ebooks.info ■ CONTENTS Acknowledgments I'd like to first and foremost thank the iOS and Mac OS X communities... www.it-ebooks.info 2 CHAPTER 1: The Inevitability of the iPhone in the Enterprise Three Devices, One Platform But wait, this book isn’t about just the iPhone It’s really about iOS, the operating system that runs on the iPhone, the iPod Touch, and the iPad The iPhone is one of the most popular phones on the market today But the iPhone itself is really just what the name indicates, a phone As with many... unique and so requires a unique integration strategy For example, the BlackBerry from Research In Motion has BlackBerry Enterprise Server, capable of managing a fleet of BlackBerrys Android, iPhone, iPod Touch, and Windows Mobile devices are capable of using ActiveSync for connecting to an Exchange server From the Exchange server, policies can be applied and users can access mail, contacts, and calendars... encounter with other platforms The iPad and iPhone represent a new challenge to many environments Many of the devices are owned by end users There isn’t a historical evolution of products and processes around iOS given its rapid adoption in many an enterprise In addition, the management options (including thirdparty options) aren’t yet as mature as those for many other brands and operating systems of mobile... mobile devices Making Large-Purchase Considerations Apple looks at enterprise environments in one of two ways: as large educational environments or corporate enterprises (and government is considered a subset of enterprise) According to the size and scale of your corporate enterprise, you may 13 www.it-ebooks.info 14 CHAPTER 2: Purchasing and Activating already have a dedicated account executive or systems... before you put the devices into the hands of users how you are going to deploy them, whether users can use their standard enterprise messaging account to purchase software and register devices, how they will be distributed, how patch management will be handled, and of course, what business objective the devices are there to meet Strategizing for your deployment and patch management is covered from... have corporate data on them www.it-ebooks.info CHAPTER 1: The Inevitability of the iPhone in the Enterprise All of the third-party products for deploying the iPhone, iPad, and iPod Touch use the same basic underlying technology that is provided by Apple Basically, you start with creating a configuration profile in the iPhone Configuration Utility (Chapter 7) You attach those profiles to groups of devices . environments Enterprise iPhone and iPad Administrator’s Guide Charles Edge Strategies for iOS Deployment, Integration, and Control Edge Enterprise iPhone and iPad Administrator’s Guide Companion eBook Available www.it-ebooks.info www.it-ebooks.info . Guide Companion eBook Available www.it-ebooks.info www.it-ebooks.info i Enterprise iPhone and iPad Administrator’s Guide ■ ■ ■ Charles Edge www.it-ebooks.info ii Enterprise iPhone and iPad Administrator’s Guide Copyright ©. strat- egies, steps and procedures layed out in this book will guide you to success. Over the course of this book, Enterprise iPhone and iPad Administrator’s Guide looks at different environments and different