Apple's new Deployment Programs

[FastGM3]

It looks like Apple has finally opened up OTA supervision among other things.

https://deploy.apple.com/qforms/open/register/index/avs it looks like you have to create a new Apple ID and so far it doesn't mention anything about tying into our current MDM application/server (JSS). Does anyone have any more information than what Apple is providing? How about JAMF? Any plans of an update to Casper to support these new features in particular OTA Supervision.

Here's another article that led to my discovery of this latest development from Apple

http://arstechnica.com/apple/2014/02/apples-new-management-features-help-locked-down-ipads-stay-lock...

Thanks,
Chuck

[nessts]

oh even better you half way into creating this and you have to have a D-U-N-S number
The D-U-N-S Number is a unique nine-digit number that identifies business entities on a location-specific basis. Assigned and maintained by Dun & Bradstreet (D&B), the D-U-N-S Number is widely used as a standard business identifier.

You must provide a D-U-N-S Number registered to your legal entity as part of the enrollment process for the Device Enrollment Program.

Locate your company's D-U-N-S Number

good luck getting one of those created in a large company if you dont already have one. I am sure it makes sense somehow i have yet to see it though. And what does a vendor who supports 12 different customers, do we need to create one of these per account we support. But at least its not vapor ware anymore.

[mpermann]

@nessts, from what I read in one of the documents, if you are a service provider doing work for a client, the client has to setup an account and add you as an administrator. Then I believe you can administer their iOS devices. But, this D-U-N-S number sounds pretty D-U-M-B to me.

[mm2270]

The DUNS number is nothing new. Back when Apple had a more complicated process around getting an APNs certificate created you needed to have a DUNS number to submit a request then too if my memory serves me. Also, DUNS #s aren't as uncommon in many businesses as you might think. Generally speaking if the company does business with other companies, files taxes and other common functions, they probably have a DUNS # already. Its a global standard for credit reporting in the business sector. Even an individual can file for a DUNS # now.

[bentoms]

Second what @mm2270 has said.

If your unsure if you have a DUNS #. Speak to someone in your finance department.

[John_Wetter]

@nessts][/url - Requiring a DUNS number for this is a no-brainer to me... With DEP basically being that through MDM you can assert that you 'own' a device via OTA supervision, if I were Apple, I'd be damn sure you're working with a legit company before allowing them to do that too. As you mentioned, this is harder for a third party to manage this, but you also wouldn't be 'owning' the device; so it is a matter of walking the client through their enrollment. As @bentoms][/url mentioned, talk to their finance department, or have their people do it... 9.9/10 times they'll say "oh yeah, it is..." We got our application materials in last night around 2am and already got the first confirmation call so we'll see how the process goes. It seems identical to the APNs process originally was though which makes sense, you are asserting authority over a device, whether it be through a certificate or supervision, so confirmation is necessary.

These programs have all been coming for a while, I'm excited to see how they all work out, along with once all the MDM's pick it up and launch their versions supporting this. These are the final pieces to the puzzle from the VPP 2 launch back last fall.

[bthomason]

I'm getting this when I sign into my VPP account.

[weldon]

I think the Apple ID has to be verified (email confirmed) and 2-factor authentication has to be enabled.

[MikeV-Holden]

The Apple ID you use has to have the correct credentials with Apple. I could not use the Apple ID I use when accessing the Apple Online Store for example.

[clifhirtle]

It has to be a new and unique AppleID, you cannot use your existing one. We received the following advice from our Apple TAM, which makes a modicum of sense in the overall spectrum of managing a growing arsenal of different AppleIDs for different Apple program enrollments (i.e.: Developer vs DEP vs VPP):

Each of the individual programs seems to require a unique AppleID leading many customers to keep track of numerous IDs. What I've seen a lot of them do is make 'program specific' AppleIDs. In other words I've got folks that have vpp_apple@companyname.com email addresses for the VPP program etc. etc. This has helped them to be consistent in the AppleID naming creation to help better manage them.

[John_Wetter]

Yes, with all of the Apple programs, what @clifhirtle mentioned is being considered best practice. We have all of our different ID's named for what they do and it works well.

[jonsm]

Has there been any word from JAMF when Casper will be updated?

[plawrence]

Has there been any word from JAMF when Casper will be updated?

Nothing official. There was talk about a beta being available for the VPP Managed Distribution features, ask JAMF support for more info. My guess/hope is they are waiting for the release of the new MDM features in iOS 7.1 before launching the supported Casper version. Fingers-crossed!

[clifhirtle]

@jonsm talk to your Account Exec if you'd like to apply for the Casper beta program. Not sure if they've filled all the slots but if you'd like to get your early hands on up and coming technology that's the place to find it.