GO!Enterprise MDM Why Distribute GO!Enterprise MDM for iOS as an Enterprise App? 1
Distributing GO!Enterprise MDM for iOS as an Enterprise App
This guide provides information on . . .
. . . Benefits of Distributing GO!Enterprise MDM for iOS as an Enterprise App
. . . Requirements for Distributing GO!Enterprise MDM for iOS as an Enterprise App
. . . Tips on Enrolling in the iOS Developer Enterprise Program
. . . Information for Organizations using an App Store version
GO!Enterprise MDM Why Distribute GO!Enterprise MDM for iOS as an Enterprise App? 2
Table of Contents
Why Distribute GO!Enterprise MDM for iOS as an Enterprise App?
3
Requirements
5
Enrolling in the iOS Developer Enterprise Program
7
Preparing for your Enterprise App
8
Distributing your GO!Enterprise MDM Enterprise App
15
GO!Enterprise MDM Why Distribute GO!Enterprise MDM for iOS as an Enterprise App? 3
Why Distribute GO!Enterprise
MDM for iOS as an Enterprise
App?
The GO!Enterprise MDM for iOS device application is available in the Apple App Store. In accordance with Apple privacy regulations, however, App Store applications do not permit background processing to initiate a connection to a server for the purpose of tracking statistics. Thus, the GO!Enterprise MDM app obtained from the App Store requires iOS users to initiate synchronization of user/device statistics and location data by opening the application at least once a day.
Since Enterprise (proprietary, in-house) Applications do not fall under the same privacy regulations as App Store applications, you can opt to distribute the GO!Enterprise MDM for iOS device app as an Enterprise App. Applications distributed in this manner can run on a device in the background without user interaction.
Synchronization of user/device statistics and location data occurs automatically at a frequency determined by the device connection schedule.
Distributing the application as an Enterprise App requires that your organization maintain an annual Apple iOS Developer Enterprise Program (iDEP) membership. Globo Mobile Technologies will work with
organizations who want to pursue this solution. Please contact Globo Mobile Technologies support team for more information at, technical@globoplc.com.
Distribution Options
You can host the GO!Enterprise MDM for iOS Enterprise App at your own site or the app can be hosted at the Globo Data Center. Globo Mobile Technologies will issue your organization a URL from which users can obtain the application. Updates to an Enterprise App hosted at Globo Mobile Technologies follow the same update schedule as the standard application available on the Apple App Store. See Distributing Your Enterprise App.
Tips for Using the Application Hosted in the App Store
If you choose not to distribute the GO!Enterprise MDM for iOS app as an Enterprise App, you should do the following to ensure the most effective use of the App Store application:
GO!Enterprise MDM Why Distribute GO!Enterprise MDM for iOS as an Enterprise App? 4 If you use the Compliance Manager to restrict devices that do not make GO!Enterprise MDM
connections or update location data, you may want to set the parameters for certain restrictions more liberally for the iOS device platform. This will prevent iOS users from being easily restricted due to infrequent GO!Enterprise MDM connections or location data updates. Configure the following Device Platform Restrictions for iOS devices accordingly:
o Restrict user GO!Enterprise MDM connections o Restrict if location not updated
GO!Enterprise MDM Requirements 5
Requirements
The following prerequisites must be in place before you can distribute the GO!Enterprise MDM for iOS application as an Enterprise App:
An account with the iOS Developer Enterprise Program (iDEP) (Note: This is not the Apple Developer Program)
Apply for an account at: http://developer.apple.com/programs/ios/enterprise/
See the section, Enrolling in the iOS Developer Enterprise Program, in this document for additional information.
GO!Enterprise MDM Server
GO!Enterprise MDM Requirements 6
Preparing to distribute the GO!Enterprise MDM for iOS device application as an Enterprise
App
If you have decided to distribute the GO!Enterprise MDM for iOS application as an Enterprise App, determine whether you will host the Enterprise App in your own environment or have the app hosted at the Globo Data Center. Then follow this process:
1. Enroll and maintain an annual membership in the Apple iOS Developer Enterprise Program (iDEP). Customer enrollment process for iDEP can take up to eight weeks.
http://developer.apple.com/programs/ios/enterprise/
2. Contact Globo Mobile Technologies Technical Support at technical@globoplc.com to requestan Enterprise App build of the GO!Enterprise MDM for iOS application.
3. Globo Mobile Technologies will send you a Certificate Signing Request (CSR) for the application and the sub-contractor agreement authorizing Globo Mobile Technologies to build your GO!Enterprise MDM Enterprise App. You can expect this within one business day after you make your request. 4. Using the CSR, go to the Apple developer portal and create a Production Certificate, an App ID, and
an “In House” Distribution Provisioning Profile for the GO!Enterprise MDM for iOS device application. https://developer.apple.com/devcenter/ios/index.action
5. Send your signed sub-contractor agreement, the Production Certificate, and the Provisioning Profile, to Globo Mobile Technologies.
6. Globo Mobile Technologies will build the app and deliver it to your host site or host it at the Globo Data Center. The new Enterprise App should be available within one business day after Globo Mobile Technologies receives your certificate, profile, and signed agreement.
Updates to your GO!Enterprise MDM for iOS Enterprise App
If you choose to have your GO!Enterprise MDM Enterprise App hosted at the Globo Data Center, updates to the application software will follow the same update schedule as the standard application available on the Apple App Store. Organization administrators will receive notification and
descriptions of software updates well in advance.
GO!Enterprise MDM Enrolling in the iOS Developer Enterprise Program 7
Enrolling in the iOS Developer
Enterprise Program
Distributing the GO!Enterprise MDM for iOS device application as an Enterprise App requires that you enroll in the iOS Developer Enterprise Program. The application process involves creating an Enterprise
Developer account and paying the enrollment fee. Apple’s verification process can take up to eight weeks, so it is advisable to begin the enrollment process as soon as possible.
Apple requires the following:
You must have a DUNS number (Data Universal Numbering System from Dun & Bradstreet). You will be required to provide your DUNS number during the enrollment process. If you do not have one, you can obtain one at: https://iupdate.dnb.com/iUpdate/companylookup.htm
You must have authority to bind your company to the legal agreements. You will need to provide the legal contact who can verify that you have the authority to bind your company to the iOS Developer Program Enterprise License Agreement.
Each organization must have its own iOS Developer Enterprise Program membership.
Apply for the Apple Enterprise Developer account at: http://developer.apple.com/programs/ios/enterprise/.
The Apple Developer site steps you through enrolling and creating the account. The steps include:
Enter Account Info - Create an Apple ID, enter personal profile information and answer survey questions. Apple sends a verification email. Verify by signing in with your Apple ID. Enter company information, including legal entity name and DUNS number.
GO!Enterprise MDM Preparing for your Enterprise App 8
Preparing for your Enterprise App
After you have obtained an iOS Developer Enterprise Program membership, there are several steps to complete before you can distribute GO!Enterprise MDM for iOS as an Enterprise App.
Determine whether you want to have the App hosted at the Globo Data Center or host it yourself.
Globo Mobile Technologies will send you a Certificate Signing Request (CSR) for a Production Certificate. (Since Globo Mobile Technologies will build and be considered the sub-contractor for the app, the CSR must be issued from Globo Mobile Technologies.)
Sign your sub-contractor agreement with Globo Mobile Technologies authorizing Globo to build your GO!Enterprise MDM Enterprise App.
Through the iOS Development Center, use the CSR to create a Production Certificate and unique App ID, and an “In House” Distribution Provisioning Profile. Send them to Globo Mobile Technologies along with your signed subcontractor agreement.
Globo Mobile Technologies will use the certificate and profile to build the Enterprise App. 1. When you receive the Certificate Signing Request (CSR) from Globo Mobile Technologies,
browse to https://developer.apple.com/devcenter/ios/index.action
GO!Enterprise MDM Preparing for your Enterprise App 9
Create the Production Certificate and APP Identifier
4. Choose Certificates, then click the + icon in the top right corner of the page to create the production certificate.
5. Under the Production section, mark the radio button next to App Store and Ad Hoc and click Continue.
GO!Enterprise MDM Preparing for your Enterprise App 10 7. Download and save the Production Certificate. You will send it and the Distribution
Provisioning Profile, which you will create next, to Globo Mobile Technologies Technical Support, along with your signed sub-contractor agreement.
8. Once the certificate is created, select App IDs from the Identifiers section of the left panel and click the + icon in the top right corner of the page to create the App ID.
GO!Enterprise MDM Preparing for your Enterprise App 11 10. Again, on the Register iOS App ID page, select an Apple ID Prefix. The default value can be
used.
11. Under App ID Suffix, mark the radio button for Explicit App ID and enter a Bundle ID for the App ID. This is a unique ID to identify the app, commonly in the form of
com.yourcompanyname.appname.
GO!Enterprise MDM Preparing for your Enterprise App 12
Create an “In House” Distribution Provisioning Profile
13. Once the app identifier is created, select All from the Provisioning Profiles section of the left panel and click the + icon in the top right corner of the page to create a profile.
GO!Enterprise MDM Preparing for your Enterprise App 13 15. Select the App ID from the dropdown.
GO!Enterprise MDM Preparing for your Enterprise App 14 17. Give the profile a name by which you can identify it. Click Generate.
18. You will see the newly created Provisioning Profile.
GO!Enterprise MDM Distributing your GO!Enterprise MDM Enterprise App 15
Distributing your GO!Enterprise
MDM Enterprise App
GO!Enterprise MDM for iOS Enterprise App Hosted at the Globo Data Center
If your GO!Enterprise MDM for iOS app will be hosted at the Globo Data Center, Globo Mobile Technologies will use the certificate and profile you send to build the app and will then issue your organization a URL from which users can obtain the application.
Updates to a GO!Enterprise MDM Enterprise App hosted at the Globo Data Center, follow the same update schedule as the standard application available on the Apple App Store. Organization administrators will receive notification and descriptions of software updates well in advance.
GO!Enterprise MDM for iOS Enterprise App Hosted at Your Site
If you are hosting your GO!Enterprise MDM Enterprise App at your own site, you may want to do one of the following:
If your company has developed other Enterprise Apps, you may want to distribute the GO!Enterprise MDM Enterprise App in the manner that you distribute the other apps.
Place the app on a secure Web site. . URLs pointing to Enterprise Apps, including manifest files, must be https.
Add the app to the /Sync directory on the server where the GO!Enterprise MDM Web/HTTP component is housed.
The app build comes to you in two files, an .ipa file and a .plist file.
The .ipa file is the app and needs to be hosted on your server.
The .plist is a text file that contains information that an iOS device will need to install the app. The .plist can be located, but is not required to be, in the same place as the .ipa file.
Edit the .plist file so the URL value is the address where you host the .ipa file.
Create a simple Web page that contains a link to the .plist. Users will use this Web page to download the app.
The link to the .plist must be in a format that contains the following specific details, so that devices recognize it as a means to install the app.
Where you see SERVER_ADDRESS_FOR_PLIST, insert the address of the server where your .plist file is located:
<html><body>
<a
href="itms-services://?action=download-manifest&url=https://SERVER_ADDRESS_FOR_PLIST/GO!EnterpriseMDM.plist"> Install GO!EnterpriseMDM</a>
</body></html>
GO!Enterprise MDM Renewing an Enterprise App Certificate 16
Renewing an Enterprise App
Certificate
IDEP Membership Renewal
Organizations distributing GO!Enterprise MDM for iOS as an Enterprise App are required to maintain an annual membership in the Apple iOS Developer Enterprise Program (iDEP).
Enterprise App Certificate and Profile Renewal
In addition, the Enterprise App provisioning profile must be renewed annually and the production certificate must be renewed every three years. Organizations should keep track of the certificate’s expiration date, because there is no automatic renewal notification as the date approaches.
An expired provisioning profile will prevent your organization from receiving updates to the GO!Enterprise MDM App.
An expired certificate will disable all apps in use.
1. Before your production certificate or provisioning profile expires, log in to the Apple iOS Dev Center and select Certificates, Identifiers & Profiles from the right panel. Follow the same procedure used to initially create your production certificate and provisioning profile.
Annually you will generate a new provisioning profile. See Create an “In House” Distribution Provisioning Profile
Every three years you will generate a new production certificate in addition to the provisioning profile.
See Create the Production Certificate and APP Identifier
