+ Post New Thread
Results 1 to 10 of 10
Mac Thread, iPad MDM: Keep itunes logged in in Technical; I am testing Cisco Meraki MDM with several iPads currently. I completed the following general setup process: 1. Registered for ...
  1. #1

    Join Date
    Dec 2006
    Location
    US
    Posts
    300
    Thank Post
    64
    Thanked 17 Times in 16 Posts
    Rep Power
    18

    iPad MDM: Keep itunes logged in

    I am testing Cisco Meraki MDM with several iPads currently. I completed the following general setup process:

    1. Registered for VPP and linked our Apple VPP to Meraki account
    2. Created a Meraki device profile and downloaded to Mac Mini server running Mavericks Server with Apple Configurator
    3. Imported Meraki profile to Apple Configurator
    4. Used Apple Configurator to push wireless configuration and Meraki profiles to iPad and supervise device

    At that point, Apple Configurator applies the wireless configuration but Meraki fails. (I think this is because the wireless is not connected quickly enough). I then repush the Meraki profile and hit install on the iPad prompt and Meraki installs properly.
    After Meraki installs, iTunes prompts for username/password on the iPad. I can enter the credentials, but it does not save the password - it prompts again after the iPad is restarted.

    I'd really like to have the iPads never prompt for password so that apps can be pushed fully automatically. I thought supervising the devices would allow this to work as expected, but it does not seem to. Any ideas?

  2. #2

    Join Date
    Jan 2012
    Posts
    83
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    6
    Thanks to apple you need the end user to know the apple ID and enter it when ever apps are pushed out.

  3. #3

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,449
    Thank Post
    209
    Thanked 306 Times in 227 Posts
    Rep Power
    205
    ^^ This. @internetuser is right unfortunately. Enjoy your never ending battle with them

  4. #4
    SovietRussia's Avatar
    Join Date
    Mar 2013
    Location
    Powys, Wales
    Posts
    606
    Thank Post
    67
    Thanked 131 Times in 102 Posts
    Rep Power
    43
    This was all fixed in iOS 7 when Apple introduced silent app push for 3rd Party MDMs...

  5. #5

    abillybob's Avatar
    Join Date
    May 2013
    Location
    Shropshire
    Posts
    2,449
    Thank Post
    209
    Thanked 306 Times in 227 Posts
    Rep Power
    205
    Quote Originally Posted by SovietRussia View Post
    This was all fixed in iOS 7 when Apple introduced silent app push for 3rd Party MDMs...
    But they didn't fix anything nothing has changed.... give it a go upgrade to iOS 7 and then try pushing an app out through Meraki!

  6. #6
    Brimstone's Avatar
    Join Date
    Jan 2014
    Location
    Worcester
    Posts
    137
    Thank Post
    18
    Thanked 32 Times in 25 Posts
    Rep Power
    7
    Quote Originally Posted by SovietRussia View Post
    This was all fixed in iOS 7 when Apple introduced silent app push for 3rd Party MDMs...

    More complete misinformation.......I despair

  7. #7

    Join Date
    Dec 2007
    Location
    Potomac, MD, USA
    Posts
    56
    Thank Post
    8
    Thanked 24 Times in 12 Posts
    Rep Power
    54
    I haven't seen it explicitly mentioned anywhere, but I'm pretty sure that silent app push only works using the newer Managed Distribution method of VPP, not the code claim method. It is definitely true that the device has to be supervised, but the OP seems to have that covered already.

  8. #8

    Join Date
    Dec 2006
    Location
    US
    Posts
    300
    Thank Post
    64
    Thanked 17 Times in 16 Posts
    Rep Power
    18
    It appears that because I was trying to push the Meraki profile at the same time I was trying to supervise the iPads, supervision failed due to Meraki profile installation failing. My workaround (which seems to support silent app pushing now) was:
    1) Supervise the iPads with a basic non-Meraki profile that contains only the Wifi connection settings. This allows the iPad to be supervised successfully.
    2) On the iPads, go into settings and login as the App Store user, making sure to enable automatic installation of apps.
    3) Use Apple Configurator to push the Meraki profile to the iPad, and then press Install on the iPad when prompted
    4) Meraki apps have to be deployed through both VPP to the users and through the App section to the device to trigger fully silently.

    I'm not really sure why the Meraki profile was failing to install during supervision but at least silent app deployment seems to work now.

  9. Thanks to netadmin from:

    JSchlackman (9th May 2014)

  10. #9
    Brimstone's Avatar
    Join Date
    Jan 2014
    Location
    Worcester
    Posts
    137
    Thank Post
    18
    Thanked 32 Times in 25 Posts
    Rep Power
    7
    Quote Originally Posted by netadmin View Post
    It appears that because I was trying to push the Meraki profile at the same time I was trying to supervise the iPads, supervision failed due to Meraki profile installation failing. My workaround (which seems to support silent app pushing now) was:
    1) Supervise the iPads with a basic non-Meraki profile that contains only the Wifi connection settings. This allows the iPad to be supervised successfully.
    2) On the iPads, go into settings and login as the App Store user, making sure to enable automatic installation of apps.
    3) Use Apple Configurator to push the Meraki profile to the iPad, and then press Install on the iPad when prompted
    4) Meraki apps have to be deployed through both VPP to the users and through the App section to the device to trigger fully silently.

    I'm not really sure why the Meraki profile was failing to install during supervision but at least silent app deployment seems to work now.
    The MDM Profile install will always fail (not just Meraki MDM) because the iPads needs to have trust certificate installed first from configurator to allow you to then manage this via your preferred MDM solution, this will change when DEP arrives in the rest of the world.

  11. Thanks to Brimstone from:

    netadmin (10th May 2014)

  12. #10
    stevehp's Avatar
    Join Date
    Jul 2008
    Location
    Ohio
    Posts
    102
    Thank Post
    13
    Thanked 19 Times in 16 Posts
    Rep Power
    16
    As you've found out you need to run the devices through the prepare tab with just a wireless settings profile then switch over to the Supervised Tab and apply the MDM profile.

    When the MDM profile doesn't apply it's 99.9% the fact that it doesn't have a network connection to the MDM server. About 2% of the time you might need to wake it up before the wireless connection grabs an IP from DHCP. Brimstone is also correct that if you're MDM solution doesn't have a commercial trusted cert assigned to it you also need to push out the Trust Profile at the same as the MDM Profile as it contains the self signed certificate for the server.

    With DEP FYI students and or faculty will need to be privy of the schools wireless password(s). For most that shouldn't be an issue, but for groups that guard that password with there life that's another issue. For us at least that will probably just mean an open ssid during our "enrollment period" at the start of the school year. However if these are shared devices and you are not in a 1:1 then DEP isn't the workflow you should be utilizing, for that you need to stick with Configurator. Also keep in mind that once you're in DEP the devices cannot be managed or and or used at all with iTunes or Configurator due to the activation changes made to the device.
    Last edited by stevehp; 12th May 2014 at 01:57 AM.

  13. Thanks to stevehp from:

    netadmin (12th May 2014)

SHARE:
+ Post New Thread

Similar Threads

  1. HELP IPAD MDM ITUNES ACCOUNT
    By rama1712 in forum Netbooks, PDA and Phones
    Replies: 4
    Last Post: 30th April 2014, 07:23 PM
  2. [iPad] iPad MDM?
    By FN-GM in forum Netbooks, PDA and Phones
    Replies: 10
    Last Post: 4th April 2013, 08:11 PM
  3. Prevent 'Log-in via dial up connection'
    By adamyoung in forum Windows
    Replies: 17
    Last Post: 12th October 2010, 04:02 PM
  4. Slow log in on XP workstations
    By markesmith in forum Wireless Networks
    Replies: 39
    Last Post: 29th September 2006, 07:23 AM
  5. Replies: 20
    Last Post: 30th March 2006, 02:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •