iPadOS

Management
Basics
 2

Apple unveiled iPadOS at its 2019 Worldwide

Developer’s Conference (WWDC).

As Apple device numbers rise in business and education environments

around the globe, it’s imperative that technology investments are
maximized so that organizations can leverage iPad to its full potential.
While some are very familiar with Apple already,
iPadOS is a new operating system that is poised to help IT teams better
manage the influx of new devices.
all are diving into iPadOS management for the first
time. This guide will help you learn about this new
operating system so you can build and master your
iPad management skills.

Introduction to Explanation of Outline of lifecycle Overview of the

iPad and iPadOS services and management leading Apple
management programs available stages management
for iPadOS devices solution

PAGE 3 PAGE 4 PAGE 6 PAGE 15

 3

How MDM works

To effectively manage iPadOS devices and unleash their full potential, organizations require an equally
powerful MDM solution. Most Apple devices are able to understand and apply settings such as remote
wipe or passcode restrictions to the built-in framework. Two core components to the MDM framework are

Introduction
configuration profiles and commands.

to iPad and
iPadOS
management Blueprints MDM commands

…allow admins to easily customize and deploy …are singular commands that you can send to
apps and setting for groups of devices, all from your managed devices to take specific actions.
one place. Pre-configure settings including Has a device gone missing? Put it into Lost
iPad devices* run on the iPadOS
email, device security and Wi-Fi networks and Mode or send a remote wipe command. Need to
platform. You can manage
customize the apps on your team’s devices. These upgrade to the latest OS? Send the command to
devices with mobile device
configurations can be specified and deployed download and install updates. These are just a few
management (MDM) which
leveraging Jamf Now. examples of the different actions you can take on
is Apple’s framework for a fully managed Apple device.
managing iPadOS.

*iPadOS is compatible with 9.7,

10.5, 11, 12.9-inch iPad Pro, iPad
(5th, 6th, and 7th generation),
iPad Mini (5th gen), iPad mini 4,
iPad Air (3rd gen), iPad Air 2.
 4
Automated Device Enrollment Purchase content in
volume

Apple services
Apple’s Automated Device Enrollment allows organizations
of any size to pre-configure devices purchased from Apple You can purchase and license apps in bulk from
or an authorized Apple reseller without ever having to touch Apple and distribute them to individuals via

and programs the device. By leveraging the power of Automated Device

Enrollment (formerly Device Enrollment Program or DEP) you
Apple ID or directly to devices without an Apple
ID. Apps can be reassigned as deployment
no longer need to be the only person receiving, unboxing needs change. This process is formerly part
and configuring new hardware. Instead, you can ship new of the Volume Purchase Program or VPP. You
devices directly to individual employees and let them unbox can link your service token (received from
As Apple devices became more
it. The first time the device is turned on, it will automatically Apple) to your Apple management solution for
popular in small and medium-sized assignment and distribution.
reach out to Apple and Jamf Now to pull down relevant
businesses, questions about how to configurations, settings and management.
best deploy devices with sometimes
limited IT resources, how to address
Apple IDs and the purchasing of apps
arose. Apple, of course, looked to solve
these issues and introduced various
Apple Business Manager Apple School Manager
programs and services to take device
management one step further, making
it easier and more cost-effective to Apple Business Manager is a web-based portal Apple School Manager is a web-based portal for
for IT administrators that combines Automated IT administrators to oversee people, devices and
manage devices in bulk.
Device Enrollment and volume purchasing of apps content — all from one place. Exclusively for education,
Not every Apple device management and books in one central location. Apple Business Apple School Manager combines Automated Device
solution supports Apple’s programs Manager is available to all non-educational Enrollment, volume purchasing of apps and books
organizations. Organizations with existing DEP and other classroom management tools such as the
and services. Check with your vendor
or VPP accounts can upgrade to Apple Business Classroom app in one portal. Apple School Manager
to ensure they support these programs,
Manager within a few minutes, or organizations can enables Managed Apple IDs and Shared iPad and can
as well as the incremental changes sign up for the first time at business.apple.com be integrated with your school’s student information
Apple makes throughout the year. system (SIS).
 5

Apple IDs Managed Apple IDs

Apple IDs are the personal account credentials users use to access Apple services Apple School Manager for educational institutions enables Managed Apple IDs for
such as the App Store, iCloud, iMessage and more. Depending on the needs of students and can be integrated with your school’s student information system (SIS).
your organization, your end users can leverage their personal Apple ID on the job, Managed Apple IDs are a special type of Apple ID for students. They don’t require
or you can avoid using Apple IDs altogether thanks to the ability to deploy apps special permission, and they allow you, as an IT admin, to create and dynamically
to devices direclty without an Apple ID. If you’re an education institution, your update user information. Additionally, Managed Apple IDs are created in the Apple
students will receive a different type of Apple ID (see next page). School Manager portal and can sync with Classroom data.

For businesses and government organizations, Managed Apple IDs are only used
for administrative purposes within Apple Business Manager.

Open Enrollment Device Supervision

Open enrollment is the tool that allows users to add their iPad into Supervision is a special mode devices are placed into when enrolled via
Jamf Now themselves. Devices in open enrollment can still be remotely Apple Business Manager, Apple School Manager or Apple Configurator.
managed by Jamf now account administrators. Supervision gives institutions greater control over the iPadOS devices
they own. A larger number of management features including lost mode,
activation lock bypass, and wallpapers all require supervision. It is
recommended that institutionally-owned devices be put into Supervision
mode.
 6

1 iPadOS deployment
and provisioning 2 Configuration
management
Getting devices into the hands of Applying the correct settings to devices.
end users.
Lifecycle
management
stages 3 App management
Ensuring the correct software and apps
4 iPadOS inventory
Reporting on the status of each device.
are on each device.

Apple’s device management

framework, commonly referred
to as the MDM framework,
includes six key elements across
5 iPadOS security
Securing devices to organizational
the entire lifecycle of your Apple standards.
devices. MDM is Apple’s built-
in management framework —
From initial deployment to the end-user experience, it’s critical to understand, manage and support the
available for macOS, iPadOS, iOS
entire lifecycle of iPadOS devices in your environment. This ensures both the security and maximized
and tvOS and aids with these
potential of your devices.
functions:
 7

1 iPadOS deployment and provisioning

Before configuring devices for end users, devices must be enrolled into an Apple management
solution. There are several enrollment methods available, but the two highlighted below are
recommended for business and educational institutions looking for a streamlined and positive end-
user experience.

Description User Experience Supervision Best For

Providing users an out-of-box

experience. With Automated Device
Automated Device User receives shrink-wrapped Enrollment you can:
Enrollment with Apple Automatic enrollment box, and the device is
Yes–wirelessly
over the air automatically configured when • Ship devices to remote employees
Business Manager and
turned on • Speed up the onboarding process
Apple School Manager • Support education instituions with
iPad programs

Unmanaged devices currently in

User-initiated Manual enrollment over User visits a specific URL to
No the field or devices that need to be
enrollment via URL the air configure their device
reenrolled into a new MDM server
 8

BEST PRACTICE Deploy apps with Apple Business Manager and Apple School Manager

Apps are deployed

directly to the device.
Sign up for Apple No interaction or Apple
School Manager ID required.
or Apple Business Add your app licenses
Manager and add to your MDM server,
your MDM server to including free apps.
your portal.

4
1 2 3 ? 4 5
Choose to assign apps to
either devices directly or
to a user’s Apple ID.

Find and purchase app licenses in

Apple Business Manager or Apple
School Manager. You will also
need to “purchase” free apps.

Invite users to participate in your Apps are linked to a user’s Apple ID

app deployment via email or push and are found in the Purchased tab
notification. of the App Store.
 9

2 Configuration management
When it comes to configuring Apple devices, the world is your oyster. You
can personalize and tailor individual devices or groups of devices based
on the needs of your end users.

Don’t know where to start? Check

Blueprints Blueprint Options out Blueprint Templates in your
Define settings within iPadOS by creating • Apps • Wi-Fi
Jamf Now account to help you
Blueprints. With blurprints, you can • Web Clips • Restrictions get started with the best blueprint
easily customize and deploy apps and • Security • Single App Mode configurations for your teams
settings, including email, device security, • Email • Wallpaper
Wi-Fi networks and more so users can
seamlessly connect to the resources they
need.
 10

3 App management
App fundamentals
Purchase your apps here:
Today, we are all familiar with the App Store on our iPhone, iPad and
Apple TV devices. They are the only way for consumers to get apps on For business:
their devices. Apple reviews the developer’s code to ensure security
and performance. This is one of the reasons why Apple enjoys a strong
security reputation.

Apple devices are wildly popular among consumers because of the

Apple Business Manager
native communication, learning and productivity tools available right out
of the box, but the rich library of apps in the App Store are what set the
Apple ecosystem apart. With a device management solution in place to
manage your app deployments, you ensure users have the apps they
For educational institutions:
need — configured for their use case and secured for your environment.

Apple School Manager

 11

4 iPadOS inventory
MDM solutions are capable of querying an Apple device to collect a large
amount of inventory data, ensuring you always have up-to-date device
information and can make informed management decisions. Inventory can
be collected from a device at various intervals and include serial number, OS
version, apps installed and much more.

Examples of data collected with MDM

Hardware Details Software Details Management Details Additional Details

• Device Type • iPadOS • Supervised Status • Profiles Installed

• Device Model • List of Apps Installed • Security Status • Custom profiles installed (Plus only)
• Device Name • Storage Capacity • Blueprint • Activation Lock Status
• Available Space • Email Configuration • Purchasing Information
• Wi-Fi status • Last Inventory Update
• Restrictions status
 12

4 iPadOS inventory
Why does inventory matter?

You can’t manage what you can’t measure. The inventory data Jamf Now collects
can be used for a wide range of business needs and empower you to answer
common questions like:

Are all my devices secure?

How many apps do we have deployed?

What version of iPadOS are certain devices

running?
 13

5 iPadOS security The security and privacy of devices and access to corporate resources are a top priority for any organization. To
address these worries, Apple has a number of security features built right into iPadOS. Coupled with an Apple
management solution, you can ensure that your devices are not only secure, but your apps and network are as well.

iPadOS Security Features

Software Updates Secure System App Store Touch ID

Hardware Encrytion App Sandboxing Privacy Supervision

 14

5 iPadOS security
MDM security
commands for iPadOS
MDM Lost Mode for iPadOS
By utilizing Apple’s Lost Mode with an MDM solution, you can lock, locate
and recover lost or stolen iPadOS devices without compromising privacy
through ongoing tracking. When Lost Mode is activated, iPadOS devices
receive a customized lock screen message, are disabled from use and
send the location to IT.

Software upgrades
By developing major versions of macOS, iOS, tvOS and now iPadOS
annually, Apple has set the pace of innovation. Each year, Apple unveils
new and great consumer features, but also adds layers of security and
fixes vulnerabilities. These updates can be critical for devices used by
• Enable Lost Mode employees or students in order to protect their data. Your management
• Lock and wipe a device solution not only needs to be able to deploy updates from Apple, but also
• Remote wipe needs to quickly support (ideally on day zero) all the new management
• Update iPadOS features that come with them too.
• Restrict Autofill passwords
• Block passwords via proximity requests
 Industry-leading Apple management
Apple continues to build an interconnected ecosystem, with apps and services being
cross-compatible across devices. And with Jamf Now, remotely configuring settings
on all of your iPads, iPhones, and Mac devices quickly and easily makes Apple
management a cinch.

To get the absolute most out of Apple

and your technology investment, you
require a management solution that
matches Apple’s intuition and has Put our word to the test
proven from day one that helping people by taking Jamf Now for
succeed with Apple is top priority. By integrating with all Apple services
a test drive and you’ll see
As the gold standard in Apple and providing immediate support for the power of a cloud-based
management and with dedication to the Apple operating systems and features, MDM solution.
Apple ecosystem since 2002, Jamf is Jamf empowers you with the tools
the product most trusted by businesses necessary to address all support needs,
and schools that want to offer Apple and gives you the freedom to focus on
and provide a consistent management strategic tasks so you can save your Sign Me Up
experience across the entire ecosystem. organization time and money.