Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 33 replies
  • Subscribers 11 subscribers
  • Views 64299 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMC 6: Auto-enrolled iPads and Control App

Detlef

Last posting this year:

My iPads get the auto-enrollment-Link from the Apple configurator 2. Then after 4-5 times tipping on the touch-screen (next, next, yes, confirm, ... boring stuff) and the final "here we go" the iPads are in the SMC (with those weird naming convention iPad5,3 DAVCDEGGGVJ). I made a compliance-rule to install the Control-App when it's not installed. Works fine, Control-App ("bought" via VPP) comes to the iPad and asks whether it's allowed to send sounds and so on, the usual stuff. When I open the app, it crashes.
BUT: when I do not install the control-app via the compliance-policy but with the same task-bundle assigned to that iPad, everything is fine, control-app does not crash and can be opened.


The control-app comes from the app-store via VPP.


Merry X-mas and a happy new year

/Detlef



This thread was automatically locked due to age.
  • 0

    Well, here we are with 6.1.4. Auto-enrolled iPads get their device-names right from the iPad, thanks to the new setting added to 6.1.4. Great. My iPad appears correctly with it's real devicename in the SMC. The Control-App appears on the iPad and now my question:


    How can I configure this control-App on the 200 auto-enrolled iPads? None of them has a default mail-address, I cannot edit all iPads at once to add that missing mail-address. So what's filling this gap. Did I miss a new workflow?


    Cheers

    /Detlef

  • 0 in reply to Detlef

    Hey,

    if you go to your Settings-Tab --> Self Service Portal --> Groupsettings you might can define there your "auto enrollment" 

    I did in in my company like this. You need to define a device group, policy, taskbundle. As well you need a AD-Group where all you're people are inside. For example, if they enroll themselves they will get the correct devicegroup, policy and taskbundle. 

    AD-Group --> DeviceGroup --> Taskbundle --> Done 

    I hope you know what I mean.

  • 0 in reply to MatthiasPauli

    Matthias,

    well, no, I think that's not my point. I am able to get profiles and apps automated on the iPads (which are userless devices). My Point is that I want to configure the control-app and - maybe I missed a new feature? - this is done via sending a mail from the SMC-Server to the iPads mail address with a link in it configuring the control-app and connecting it to the SMC. No User -> no mailaddress. I need a default mailaddress for a group.

    cheers


    /Detlef

  • 0 in reply to Detlef

    Hey,

    maybe DEP would be an option for you?

    Otherwise I dont know how to help you exactly :/

  • 0 in reply to MatthiasPauli

    I already use DEP and the SMC. The missing link (for me) is a missing feature of the SMC: What I need is a default mailgroup for my SMC-Devicegroup(s). Then every new device has a mailaddress by default and I can rollout a mail with the configurationlink for the control app.

  • 0

    Hi All,

    at the moment it is not possible to automatically configure the SMC app when it is distributed to an iOS device. The developmen team currently looks into that and check if that can be realized somehow.

    However, within the Apple DEP profile, you have the option "Install SMC Client" option to directly install the SMC app during enrollment.
    See attached Screenshot.

    If you enable this option, the SMC app should be installed directly during the enrollment.

    Best regards
    Stefan

  • 0 in reply to SDU

    Hi,

    well, it's not the point to get the SMC app installed, that can be done there or with a compliance triggered task. The next step - configuring the SMC app - is the point. An automated configuration of the SMC app during the installation process of the iPad would be a really hot feature and save me some hours of work when I have to reconfigure my pool-iPads.

    Cheers

    /Detlef

  • 0 in reply to Detlef

    Hi Detlef

    if you use the above mentioned "Install Client" option, the SMC app should be already configured.

    Best regards
    Stefan

  • 0 in reply to SDU

    Stefan,

    just tried this way again and realized that I am still waiting for iOS 9.3.3 because when I try to push the control app via DEP, I get this error in the SMC-Server

    InstallApplication Error [12023][MCMDMErrorDomain]The iTunes Store ID of the application could not be validated. 07.06.2016 14:55

    That's as far as I know a known bug in iOS 9.3.1 and 9.3.2 (which should have fixed this bug).


    Cheers

    /Detlef

  • 0 in reply to Detlef

    It's fixed in the new release of Sophos 6.1.8

Unfiltered HTML