apple, innovation, technology

defer ios updates

ios12 was announced and demonstrated at wwdc, beta started at june 19th and public beta followed at june 25th

since ios 11.3 it is possible to surpress ios update on managed devices – cause you want to test new releases in your infrastructure – ensure that all of your productivity apps running fine with the new version

it is mandatory that those devcies are supervised, setup with apple device enrollment program or enabled with apple configurator

appleconfigurator

with current emm vendor it is possible to simply enable/disable this value – otherwise configure a profile in apple configurator, either send it via mail or upload to enterprise mobility management suite and deploy remote

 

This slideshow requires JavaScript.

if your device running ios version below ios 11.3 your able to configure global http proxy – with *.pac file your able to redirect apple update url

proxypac

mobile devices fit enterprise needs

apple, technology

dual-sim

travelling between two countries or managing dual persona at the same device

in enterpise those solutions are quote interesting, provide full flexibility with just one device

  • Android support DUAL-SIM/MULTIPLE SIM cards in API since ANDROID 5.1
  • Samsung KNOX support Enterprise billing on dual SIM devices

  • first dual-sim phone was the benefon twin in 2000, sim card needs to be selected at phone launch
  • 2003 dual-adapter became popular, but it was still not possible to use both at the same time
  • several chinese device spotted beginning 2006, samsung’s first dual-sim device d880 was released in 2007
  • 2012 Nokia released a cheap nokia 101
  • beginning 2014 microsoft provied dual-sim devices 530 and 630

read more: huawei’s flagship devices with dual sim

  • update: 12.09.2018 apple released iPhone XR, XS and XS Max , all got dual-SIM capabilities, one will be a physical SIM card and the other an eSIM (embedded SIM), a chinese only device will hold two physical cards
  • hopefully those solutions are from the past

51865.jpg

apple, innovation, technology

managed ios contacts

restriced access to enterprise contacts … a long journey to find its holy grail in ios 11.3

grant or deny access to your contacts

was introduced in ios 6, since 2012 it is possible to decide which apps is allowed to access your contacts – there were no api to configure the setting in an enterprise environment, block access from apps like facebook, whatsapp, line, viber, path, e.g. to enterprise contacts – with containerization you can restrict enterprise content from unauthorized access, along with usabilitity limitations

grant contact access ios 6

allow open documents from unmanaged apps to managed apps

was presented in ios 7 release, since then enterprise management was able to restrict data exchange from untrusted, unsecure, private (unmanaged) to enterprise apps (managed) – apple´s native mail is per default a private app

arrow read: how to setup outlook of ios enterprise devices

managed domains

to separate the private from enterprise accounts inside the mailapp, apple enabled this setting in ios 8 – managed domain remain blue, unmanaged marked as red – mail and web domains respect the “allow open documents from…” restriction to interact with managed apps, except the contacts

manged_domains

ios call kit

announced in ios 10, call kit improves the usability when called and even contacts secured inside a container, the name is resolved and displayed

prevent contacts in managed accounts from being used in unmanaged apps or accounts

finally, apple introduced this feature within ios 11.3 – only managed apps able to access managed contacts, this closes the gap to securely use apple mail in an enterprise environment

arrow read: how oauth changed in ios12

allowManagedToWrite UnmanagedContacts & allowUnmanagedToRead ManagedContacts

ios12 improve contact management since managed open-in restriction to enhance the managed from unmanaged separation for secure byod deployments, payload need to be deployed via mdm

arrow view how to: “managed ios contacts” & “ios managed domains” attached

apple, general, innovation

touch @macos

apple introduced the “all news” touch bar in 2017 for macbook pro, but what most mac users missing is a touchscreen – the addon airbar, extra hardware attached to the screen, looks unbeautiful

macos_with_touchscreen3.png

every smartpsmartsmaand a lot other notebook own a touchdisplayt, so what to do if you don’t want to run or carry separate device – vitualize it – get the comfort of 2 devices in one and have to ability to use your touchscreen on macos

psp-mini-hero-configurator-icon_2xadditionally some features and software are just available to macos, like apple configurator, xcode or imovie – guides how to use apple configurator are recorded and online at madereal youtube channel

not allowed to run macos on other then apple hardware, but inside are also intel chips, thats why it is possible to run it on windows – see also “hackintosh”

a fews steps are necessary to host macos in vmware running on windows…

  1. download – vmware player, macos iso or vmware and unlocker
  2. intel vt-x & amd virtualization – enable in bios and vmware settings
  3. vmware player – install software, but do not launch
  4. vmware unlocker  – execute win-install.cmd and “run as administrator.”
  5. macos iso – mount in vmware player and launch

…now your ready to use the macos features right at your finger tips

macos_with_touchscreen4.pngOther more detailed guides at @techsviewer and @tactig – virtualbox is also possible

the author is not be liable for any errors or omissions in this information nor for the availability of this information. the author is not be liable for any losses, injuries, or damages from the display or use of this information.
apple, general, google, innovation

preconfigure outlook

with it’s current release of microsoft outlook app for ios and android it is possible to preconfigure via enterprise mobility suite @microsoft

following values are suppoted for android, a step further for android enterprise to get rid of the “almost”

configure_outlook2

for ios refer to apple’s managed app configuration and it’s key value pairs

within windows10 there are some possiblities to preconfigure an email profile in outlook, even via emm

arrow read more: outlook supporting oauth, ios12 added exchange payload

other mircosoft office apps don’t support these functionality – graph api is the approach, any vendor can integrate with intune to use it as middleware to manage office apps – a powerful api with the intelligence in microsoft’s hands

microsoft_graph.png