iOS profiles are XML files consisting of payloads that will enable you to deploy configuration settings and restrictions to iOS devices. These XML files are exported from Apple Configurator and each individual configuration setting, such as the Wi-Fi configuration setting, VPN configuration setting, and certificate information, are called payloads. Using an iOS profile, you can deploy these configuration settings or restrictions, which are not available in ZENWorks, to the devices. While creating an iOS profile bundle, the XML file that is obtained from Apple Configurator is uploaded in ZENworks. When you assign this bundle to a device, on deployment of the iOS profile bundle, the encrypted version of the profile is installed on the device, thereby restricting users from changing the setting.
Creation and assignment of iOS profile bundles is supported on an experimental basis for Apple TV devices. You can configure and deploy iOS profiles, such as the app lock configuration profile, to Apple TV devices, to lock down the device to a particular app. An example of the app lock configuration file is as follows:
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>PayloadContent</key> <array> <dict> <key>IsRemovable</key> <true/> <key>Label</key> <string>test</string> <key>PayloadDescription</key> <string>Configures App lock</string> <key>PayloadDisplayName</key> <string>App Lock</string> <key>PayloadIdentifier</key> <string>com.apple.webClip.managed.1F3066B4-1D92-4CE4-891F-C3E5D0153400</string> <key>PayloadType</key> <string>com.apple.app.lock</string> <key>PayloadUUID</key> <string>E4242F0A-7872-4425-BF11-E1A269E9836D</string> <key>PayloadVersion</key> <real>1</real> <key>App</key> <dict> <key>Identifier</key> <string>com.google.ios.youtube</string> </dict> </dict> </array> <key>PayloadDisplayName</key> <string>App Lock</string> <key>PayloadIdentifier</key> <string>xyz.blr.com.</string> <key>PayloadRemovalDisallowed</key> <false/> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>59C3C2*****</string> <key>PayloadVersion</key> <integer>1</integer></dict></plist>
An XML file with the configuration settings should be exported from Apple Configurator.
On the Getting Started with Mobile Management page, navigate to the Deploy Mobile Applications section and click Create Bundles. Alternatively, from the left hand side navigation pane of ZCC, click Bundles > New > Bundle.
On the Select Bundle Type page, click iOS Bundle.
On the Select Bundle Category page, click iOS Profile.
On the Define Details page, specify a name for the bundle, select the folder in which to place the bundle, then click Next.
In the Import Profile page, browse and upload the configuration profile that you have exported from Apple Configurator. For more information on creating and importing iOS profiles, refer to the Apple Configurator documentation.
ZENworks validates certain important fields, such as the Identifier, UUID, and the version, which are unique to each profile.
Click Create Sandbox, if you want to create a Sandbox only version of the bundle.
Click Finish to complete the activity.
You can continue to assign this bundle to an iOS device. For more information, see Assigning Bundles.
To download the XML file that you just uploaded, navigate to Bundles > <click the iOS profile bundle> > Details. You can also edit the profile or upload a new profile using the Details tab. For the modified or the new setting to take effect on all the devices, you need to republish the iOS profile bundle. On republishing the bundle, the existing profile installed on the device is overwritten with the modified or new setting.
If you delete an iOS profile bundle, as soon as the device syncs with the server, the profile is removed from the device.
Also, if you deploy an iOS profile with a specific setting and if the same setting is applied using ZENworks but with conflicting values, then the setting that is applied will be based on the device’s operating system rules. For example, if you have uploaded an iOS profile that disables the device camera and if the device camera is enabled in the assigned Mobile Device Control Policy, then the setting that is applied will be based on the precedence set by iOS. To avoid such discrepancies, it is advisable that you apply a specific setting either through an iOS profile or through another feature in ZENworks.