enrolling iPad in MDM requires encrypted backup in iTunes?

[cdenesha]

Hello all,

Instead of emailing this to support, I thought I might start with the forums.

I've noticed that managed iPads, when plugged into iTunes, require an encrypted backup to be made. I had some time today to dig into this, and it turns out the Configuration profile I install has 'Force encrypted backups' UNchecked.

These are Supervised iPads, prepared using Apple Configurator, with the ability to connect to iTunes. Obviously running iOS 7.0.4, but I've noticed it with previous versions of iOS 7. I never deployed with iOS 6.

In my testing, I am able to do an unencrypted backup after imaging with Configurator (not yet managed with Casper). Note that I do install the Casper Trust profile at this stage, so there are 3 profiles - Configurator Trust, Casper trust, and an initial WiFi.

I then excluded the iPad so it would not get anyconfiguration profiles by modifying the scope of my smart group, and enrolled by installing the MDM profile with Configurator. This installed a single enrollment profile.

With just the installation of management with the MDM enrollment profile, I am no longer able to do an unencrypted backup in iTunes. The popup message says 'This iPad requires backup files to be encrypted. Enter a password to protect your iPad backup on this computer'.

Thoughts?

thank you,

chris

[nigelmarrion]

Encrypted backups are forced when the iPad is supervised I believe.

[cdenesha]

I Supervise with Configurator, and was able to do an unencrypted backup in iTunes. It was at the enrollment step that it broke.

I did come across this confirmation of the issue from another techy user, so maybe it changed in iOS 5? https://forgetcomputers.zendesk.com/entries/21012362-Force-Encrypted-Backup

[bentoms · Accepted solution]

@cdenesha, MDM enrolment requires encrypted backup & enforces it.

[alexwyatt]

So...basically, as soon as we want to do enrollment without touching the iPads, we lose the ability to use backups to, for example, assign teacher-created layouts to units, without touching every single one?

Is that an Apple rule or a JAMF one? If it's Apple...I swear they're bent on making administration difficult while making it appear easy...