Thanks! This is very thorough and helpful.
Milton Town School District
School Information Technology Discussion <[log in to unmask]> writes:
>Hello Managed iPad Districts,
>I thought I would share this with anyone who is using JAMF to manage
>iPads and other Apple devices.
>I worked with very helpful folks at JAMF/Casper to install and configure
>the AIR Secured Test Browser app. As I was one of the first to call it
>took a bit of time to get it to work. My Technical Account Rep set up a
>test environment and worked through the issues.
>The goals were:
>1) to deliver the app to all of our 1:1 deployed iPads without
>visiting the device.
>2) to avoid using Guided Access which seemed to require
>student or teacher intervention at test time.
>3) to implement Autonomous Single App Mode (ASAM) to apply
>security when the app is started and release it when the student finishes
>(or apparently pauses) the exam.
>I have the AIR Secured Browser v3 for iOS working on a test device. It
>was pushed down successfully and security with ASAM seems to be working.
> I will update this if things change during future rollout and testing.
>See the steps below provided by JAMF with a few of my edits.
>BTW: We were delayed by our mistaken assumption that it would be best
>to setup a separate Configuration Profile for SBAC/AIR app. We set this
>up and added in the AIR app and assigned the ASAM configuration bundle
>ID to it. BUT our original Configuration Profile did not have the app
>configured for ASAM. So there was an underlying conflict. We kept
>getting a “this app is not secure” message when testing.
> Suggestion: do not setup a separate Configuration Profile for
>SBAC/AIR. Or, if you do, you need the ASAM settings in both (all)
>Configuration Profiles to match.
>JAMF JSS v9.52, Apple iOS v8.1.3, AIR Secured Browser for iOS v3
>[ mailto:[log in to unmask] ][log in to unmask]
>Steps to get the Air Secured Browser app ready for ASAM. (EVERY
>Configuration Profile that has a Restrictions payload set will need to
>have the ASAM bundle identifier added in the restrictions portion of the
> Locate iOS Configuration Profiles with Restrictions Payload configured
>to add the bundle ID.
>In the JSS, go to Mobile Devices >> Configuration Profiles.
>Locate iOS Configuration Profiles with Restrictions Payload configured,
>that are scoped to Users.(if no restrictions set on the device, we can
>create NEW configuration Profile, following the below steps.)
>Click the Restrictions payload in the sidebar.
>Click the Configure button.
>Click the Applications tab.
>Scroll to the bottom and view the Autonomous Single App Mode apps
>(supervised only) section.
>Click the Add button.
>Click the Ellipse and Choose Airsecure Test from the List.
>Note: All apps in the Mobile Device App Catalog are visible with the
>ellipsis button. The bundle identifier for the desired app
>will automatically be entered by selecting that button and then the
>Click the Save alongside the newly-entered bundle identifier to store the
>entry for the desired app.
>Click the Scope tab.
>Apply the desired scope as setup in step #2.
>Click the Save button on the profile.
>Apple recently made some changes to the way MDMs can provision iPads
>remotely. The following is provided as a reminder of the steps to
>those who have not installed in an application recently in JAMF’s
>JSS/Casper environment or other MDM.
>Assigning Content to Users
>VPP assignments allow you to assign content purchased through VPP to
>users. This allows you to
>specify the content that you want to assign to each user so that it can
>be quickly distributed.
>When you create a VPP assignment in the JSS, you choose a VPP account,
>and all content
>purchased for VPP-managed distribution using the account is automatically
>available. Then you
>specify the content that you want to assign, and the users you want to
>assign it to (called “scope”).
>Creating a VPP Assignment
>1. Log in to the JSS with a web browser.
>2. Click Users at the top of the page.
>3. Click VPP Assignments.
>On a smartphone or iPod touch, this option is in the pop-up menu.
>4. Click New .
>5. Use the General payload to configure basic settings for the VPP
>6. Select the Apps payload and then select the checkbox for each app you
>want to assign.
>7. Select the eBooks payload and then select the checkbox for each eBook
>you want to
>8. Click the Scope tab and configure the scope of the assignment.
>9. Click Save.
>Note: The assignment is automatically added to the site that the VPP
>account belongs to.
>To make content available to users, you distribute it to devices. When
>content is distributed to
>users, it becomes available on their devices immediately after they
>register with VPP.
>Distributing an App to a Mobile Device
>1. Log in to the JSS with a web browser.
>2. Click Mobile Devices at the top of the page.
>3. Click Apps.
>4. Click New .
>5. Select App Store app and click Next.
>6. Browse the App Store, and do the following:
>1. Enter the name of the app.
>2. Choose an App Store country, and click Next.
>3. Click Add for the app you want to add.
>7. Use the General pane to configure basic settings for the app,
>including the display name.
>8. Choose “Install Automatically/Prompt Users to Install” from
>the Distribution Method
>9. Click the Scope tab and configure the scope of the app.
>10. Click Save.
>The app is distributed the next time mobile devices in the scope contact
>Information and great technical assistance was provided by JAMF
>JAMF General Support: 1 612-216-1296
>[ http://www.jamfsoftware.com/contact ]http://www.jamfsoftware.com/contact
CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure, or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy/delete all copies of the