These slides have been shown at UKLUG 2011 in Manchester and are overview about the iOS management capabilities.

1. iOS devices in the enterprise
Presenter: René Winkelmeyer
Company: midpoints | purify it

2. About the speaker
• René Winkelmeyer
• Senior Consultant at midpoints | purify it
• IBM Design Partner for Notes/Domino NEXT
• IBM Design Partner for Mobile
• OpenNTF projects
• File Navigator (http://filenavigator.openntf.org)
• Contact
• Skype/Twitter/LinkedIn/Facebook: muenzpraeger
• http://blog.winkelmeyer.com
• rene.winkelmeyer@midpoints.de / mail@winkelmeyer.com

3. About the speaker
• midpoints | purify it
(http://www.midpoints.de)
• IBM Advanced Business Partner
• Apple Enterprise Developer Partner
• we mobilize notes
• IBM Lotus Traveler administration add-ons
• IBM Lotus Traveler deployments
• E-Mail-Management consulting
• Notes/Domino, RCP, XPages development

4. Agenda
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM let‘s see demos for that

5. Agenda
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM

6. Why do YOU need to be engaged?

7. Why do YOU need to be engaged?

8. Why do YOU need to be engaged?

9. Why do YOU need to be engaged?

10. Why do YOU need to be engaged?

11. Why do YOU need to be engaged?

12. Why do YOU need to be engaged?

13. Why do YOU need to be engaged?

14. Why do YOU need to be engaged?

15. Why do YOU need to be engaged?

16. Why do YOU need to be engaged?

17. Why do YOU need to be engaged?

18. Why do YOU need to be engaged?
You‘ve got iOS
devices and
your users
want mail (and
more)!
Be the king!

19. Why do YOU need to be engaged?
Mobile devices mean:
configure the device
manually.
Everything: VPN, Mail,
WiFi and so on.
And what about security?
And about „BYOD“?

20. Why do YOU need to be engaged?
Step 1:
Define standards
Step 2:
Configure policies
Step 3:
Device Enrollment
Step 4:
Manage devices

21. Why do YOU need to be engaged?
Step 1:
Define standards
Step 2:
Configure policies
Configuration profiles
Step 3:
Device Enrollment
OTA Enrollment
Step 4:
Manage devices
Mobile Device Management

22. Agenda
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM

23. Using iOS devices with Lotus Traveler

24. Using iOS devices with Lotus Traveler
• Till now you need to activate ANY iOS device via iTunes (activate mode)
• see the “iPhone Enterprise Deployment Guide”, Chapter 4
• BUT
• there are serious rumors, that Apple will implement OTA-Activation with
iOS 5 !!!

25. Using iOS devices with Lotus Traveler
• IBM is leveraging the ActiveSync protocol for syncing mail, calendar and
contacts, which is implemented per default on any iOS device.
• “Normally” your users need to use the Traveler server and their http
username and password to authenticate – and to install the “configuration
profile”.

26. Using iOS devices with Lotus Traveler

27. Using iOS devices with Lotus Traveler

28. Using iOS devices with Lotus Traveler
• IBM Lotus Traveler does NOT solve ALL of you’re administration and
security requirements like
• realtime black- and whitelisting on a device basis
• distributed administration (allow local administrators or the 1st level
suppurt access to the Traveler server)

29. Agenda
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM

30. iOS enterprise capabilities

31. iOS enterprise capabilities
• Traveler does NOT serve YOUR requirements for a real enterprise
deployment.
• IMHO it’s not the job of IBM to deliver it.
• The good news:
Apple is (the only!) hardware provider which has currently real good
configuration capabilities for their devices.
• The bad news:
They don’t have an enterprise-ready software for that.

32. iOS enterprise capabilities
• For small environments you may use the “iPCU” – the iPhone Configuration
Utility (despite the name it’s although for any iOS device).
• You can create profiles with it.
• But you don’t get a real OTA deployment.

33. iOS enterprise capabilities
• A “profile” is a XML file, which follows the plist DTD. They file extension is
“.mobileconfig”.
• Those settings can be
• Mail settings: Exchange Traveler, IMAP, POP3
• Certificates
• VPN
• WiFi
• Passcode
• Restrictions
• …

34. iOS enterprise capabilities

35. iOS enterprise capabilities
• You can deploy those iPCU profiles via
• USB
• Mail
• HTTP download
• For a secure deployment they should be encrypted and signed!

36. iOS enterprise capabilities

37. iOS enterprise capabilities

38. iOS enterprise capabilities

39. iOS enterprise capabilities

40. iOS enterprise capabilities

41. iOS enterprise capabilities

42. iOS enterprise capabilities

43. iOS enterprise capabilities

44. iOS enterprise capabilities

45. iOS enterprise capabilities

46. iOS enterprise capabilities

47. iOS enterprise capabilities

48. iOS enterprise capabilities

49. iOS enterprise capabilities

50. iOS enterprise capabilities

51. iOS enterprise capabilities

52. iOS enterprise capabilities

53. iOS enterprise capabilities

54. Agenda
• Why do YOU need to be engaged about iOS devices?
• Using iOS devices with IBM Lotus Traveler
• iOS enterprise capabilities
• Over-The-Air-Deployment & MDM

55. Over-The-Air deployment & MDM

56. Over-The-Air deployment & MDM
DEMO

57. Over-The-Air deployment & MDM
2. Login 1. Open URL
3. Identify device 4. Enroll Identity (SCEP)
Profile Certificate
Service Authority
5. Individual encrypted
profile
6. Profile installation
7. Confirm installation

58. Over-The-Air deployment & MDM
• Mobile Device Management allows you
• transparent OTA management of your iOS devices (through HTTPS)
• Remote commands
• Install/remove profiles seamless
• Lock / erase device
• reset passcode
• Queries
• Network information
• Device information
• App information

59. Over-The-Air deployment & MDM
1. OTA Enrollment 3. Install MDM Profile 4. Bind to MDM server
2. Create MDM Profile
Notification
Service
MDM Server
Initial setup

60. Over-The-Air deployment & MDM
DEMO

61. Over-The-Air deployment & MDM
1. Send MDM Push 2. Device notification 3. Connect to MDM
Notification
Service
MDM Server
4. Queries + commands
via Profile-Payload
Active Management

62. Conclusion
• iOS devices are enterprise ready.
• YOU need device management to have a valuable and secure iOS
experience.
• Get the most out of you business with iOS devices, OTA and custom
applications. It’s really worth!

63. Conclusion

64. Thank you!
If I’m not overdue: let’s switch to Q&A!

65. Contact
• René Winkelmeyer
• Skype/Twitter/LinkedIn/Facebook: muenzpraeger
• http://blog.winkelmeyer.com
• http://www.xing.de/Rene_Winkelmeyer
• rene.winkelmeyer@midpoints.de / mail@winkelmeyer.com
• midpoints | purify it
• http://www.midpoints.de
• info@midpoints.de

66. Resources
• iTunes deployment
• http://images.apple.com/iphone/business/docs/iPhone_iTunes.pdf
• Device Deployment
• http://images.apple.com/iphone/business/docs/iPhone_Business.pdf
• Security
• http://images.apple.com/iphone/business/docs/iPhone_Security.pdf
• Mobile Device Management
• http://images.apple.com/iphone/business/docs/iPhone_MDM.pdf
• Certificates
• http://images.apple.com/ipad/business/docs/iPad_Certificates.pdf