MaaS360 Mobile Device Management for Apple iOS
Provision, Manage and Secure iOS Devices, Apps and Documents
Overview:
Transform Your Business with IBM MaaS360 Mobile Device Management for iOS
Apple continues to innovate on new enterprise-grade technologies to make iOS 9 a more powerful business partner.
With better security, app distribution, productivity tools and device management features in iOS 9 managed by MaaS360, you will see big differences in all corners of your mobile workplace.
Enable your employees to work anytime and anywhere on the devices they love.
Enterprise Grade Management for iOS
IBM MaaS360 Mobile Device Management for iOS provides complete visibility and control to support iPhone and iPad in the enterprise. With MaaS360, you can deploy iOS devices faster, distribute apps easier, protect data better, save money, and provide a seamless mobile user experience.
Features:
New iOS 9 Enterprise Security features:
- Restrict AirDrop for managed apps and iCloud Photo Library
- Set a host of new Supervised restrictions including usage of App Store, keyboard shortcuts, Apple Watch, passcode modification, device name modification, wallpaper modification and automatic app downloads
- Turn off trust of enterprise apps on Supervised devices, preventing user from installed third party apps to reduce pirating and malware
- Mail Drop, a new iCloud feature to help send large email attachments, is disabled by default on all MDM-created email accounts
- iOS 9 now requires at least a six-digit numeric passcode, which can be turned off or change to an alphanumeric passcode by IT
New iOS 9 App Distribution features:
- Device-based app distribution now deploys apps directly to devices using the Volume Purchase Program and MaaS360 to assign apps directly to a device with the serial number, without requiring an Apple ID
- Migrate to device-based app assignment from Apple ID-based app assignment seamlessly
- Requires VPP licenses (paid or free) and app developers to opt-in to device assignment
- Silently install apps on Supervised devices
- Push or pull public apps without user having access to App Store
- Enterprise apps installed via MaaS360 are explicitly trusted, no longer prompting user for trust confirmation
- Apps purchased and distributed through VPP can be assigned to devices or users in any country where the app is available
- VPP has expanded to include 26 countries
- Enforce app managed status by checking and ensuring apps distributed to device are managed
- Silently manage apps on Supervised devices even after users install them without reinstalling the apps or any loss of user data
New iOS 9 Device and Data Management features:
- Allow MaaS360 to trigger device updates to new versions of iOS to any device enrolled in the Device Enrollment Program (DEP)
- Initiate both the download and installation of iOS updates separately
- Only for iOS updates once device has installed iOS 9
- Apple Configurator is redesigned with a new user interface and delivers powerful new management capabilities – the ultimate companion to MaaS360
- Pre-deploy apps and stream device enrollment with MaaS360 through DEP
- Works with device-based app assignment through the Volume Purchase Program
- Activation wizard step for Android Migration can be skipped in DEP workflow
- Per App VPN now supports UDP to stream audio or video, as well as TCP
- Specify how managed apps use cellular data networks by restricting an app’s ability to connect over cellular when roaming on Supervised devices
New iOS 9 User Productivity features:
- Multitask on iPad by interacting with a second app with:
- Slide Over to quickly work with a second app without leaving the current app
- Split View to have two apps open and active at the same time
- Picture in Picture to continue watching a video while switching from app to app
- Annotate and mark up image files and PDFs
- Use the new Notes and News apps to keep track of daily activities and news
MaaS360 delivers a comprehensive toolset to configure devices, gain insight, perform actions, set and distribute policies, and distribute apps and content over-the-air.
Device Enrollment Program from Apple:
MaaS360 has robust support for Apple's Device Enrollment Program to deliver faster onboarding and advanced management of corporate devices.
Support Devices Over-the-Air
- Remove the need to physically hook up via USB with Apple Configurator
- Push both public and private apps silently to devices
- Disable AirDrop, iMessage and Activation Lock and enable device Kiosk Mode
Enable Mandatory and Lockable MDM
- Require MDM enrollment during the activation process before device can be used
- Configure security, apps, settings and restrictions seamlessly
- Block removal of MDM to prevent loss of control and security settings
Customize Device Activation Process
- Streamline and tailor device activation steps to your organization's needs
- Initiate activation with MDM and supervised controls
- Keep or skip screens during activation
Support for Multiple Versions
- iOS versions 4.3 and higher
- iPhone (including the iPhone 6s, iPhone 6s Plus, iPhone 6, iPhone 6 Plus, iPhone 5s, iPhone 5c, iPhone 5, iPhone 4s, iPhone 4 and iPhone 3GS)
- iPad (including iPad Pro, iPad, iPad Air and iPad mini)
- iPod Touch (including the 4th and 5th generation)
Gain Mobile Insight
- Hardware and network information
- Security, compliance and location details
- Apps, versions and size
- Activation Lock in Find My iPhone is enabled, locking a device to the user's Apple ID
- Report if there's an iTunes account on a device
- Time-saving features and more in native Mail and Calendar, such as Out of Office support, view Free/Busy information when scheduling meetings and VIP email threads
Perform Remote Actions
- Configure Wi-Fi, VPN and email settings and profiles
- Locate, lock, buzz and reset a passcode on a device
- Perform a full wipe of a lost or stolen device
- Selectively wipe corporate data only, leaving personal data and apps alone
Set and Distribute Security Policies
- Enforce passcode requirements
- Configure device restrictions, such as enforcing encrypted backups, restricting use of the camera, allowing Touch ID and more
- Manage document, application data, device backup, and photo synching with iCloud with restrictions
- Restrict users from moving emails between accounts, eliminating risk of corporate data leakage
- Prevent third-party applications from sending emails
- Control features such as turning on/off shared Photo Stream, recent contact synchronization, and Passbook while locked
- Set a customizable message with a phone number on Lock Screen
- Turn on/off Lock Screen Control Center, Notifications and Today View
- Allow Handoff feature that enables Continuity, web results in Spotlight and iCloud sync for managed apps
- Set features for Supervised devices such as turning on/off Guided Access, iMessage, iBookstore, Game Center, spell check, auto-correction, definition lookup and predictive keyboard; forcing all internet traffic through a global HTTP proxy server; setting device name remotely; erasing all content and settings; and preventing users from changing device restrictions
- Expanded data protection of Apple apps such as Mail, Contacts and Safari
- Touch ID biometric authentication available for third party apps to streamline some identity challenges and increase security, such as with two-factor authentication
- Always-on VPN to internal resources and new connection type IKEv2 enabled in Supervised mode
- S/MIME users can choose to sign and encrypt individual messages
Manage Mobile Apps
- Blacklist, whitelist or require apps
- Distribute private and public apps with custom app catalog
- Leverage Managed Open In to prevent data leaks
- Perform automatic silent app installs on Supervised devices
- Encrypt third-party app data automatically
- Enable managed apps to safely connect to corporate networks and information with Per App VPN
- Delete an app and its data, on-demand or as part of a selective wipe action
- Enable enterprise Single Sign-On (SSO) authentication into corporate apps just once
- SSO certificates supported along with Kerberos
- Integrate with Apple VPP program to save money by retaining full ownership and control over VPP licenses of apps and books
- Multiple tokens within a single account are supported, allowing more than one VPP account to be linked to MaaS360 at one time
- Powerful options for app developers to extend their services to other apps to customize OS interactions and UI, like keyboards extensions, through Actions, Share, Widgets, Today Screen, Filters and Notifications
- Automatic pruning of provisioning profiles to streamline app user experience
- Use managed domains for better data management
- Control which apps can open documents downloaded from managed enterprise domains using Safari
- Mail app flags external domains in red
Share Documents Safely
- Protect email text and attachments
- Provide protected access to corporate file shares
- Protect corporate documents with DLP controls
- View, create, edit and save content safely
- View in-depth reporting on documents, users, devices and apps
- Easier access to corporate documents from apps that can access content repositories and group containers
- Upload and manage content to iBooks app and control licensed books with the enhanced Apple Volume Purchase Program
- Backup of enterprise books locally or to iCloud
- Notes and highlights sync for enterprise books in iCloud, PDFs, eBooks, etc.