Adding an enterprise app for iOS

Add and configure custom iOS enterprise apps to the App Catalog with wrapping, signing, and distribution policies.

About this task

Use IBM® MaaS360® to add a custom-built iOS installation file with the .ipa filename extension.

Note: Enterprise apps must be signed with an 'enterprise signing certificate' before the app is distributed to devices.

Procedure

  1. From the IBM MaaS360 Portal home page, select Apps > Catalog.
  2. Click Add, expand the iOS section, and then click Enterprise App for iOS.
  3. In the Enterprise App for iOS window, go to the App Details tab and enter the following details.
    Option Description
    App An iOS enterprise app with the .ipa file name extension.
    App Display Name Enter a custom display name for the App on the portal. If this field is left blank, then the app's default name is extracted from the .ipa file.
    Description A description of the app.
    Category The comma-separated categories of the app. These categories make it easier for end users to find the app in the end-user App Catalog.
    Screenshots The screenshots of the app.
  4. Select the Policies and Distribution tab and enter the following details.
    Option Description
    Remove app on The app is automatically removed in the following scenarios.
    • MDM Control Removal
      When MDM control of a device is ended by the administrator or a user.
    • Selective Wipe
      When a selective wipe is issued to the device.
    • Deletion from portal or stopping Distribution
      When the app is deleted from IBM MaaS360 Portal or distribution to a specific distribution list is stopped.
    • Sign out from Shared Device
      When a user signs out of a shared device. When the user signs back into the device, the app is restored on the device.
    Security Policies The following policy is enforced on the Restrict Data Backup to iTunes app which prevents a backup of data from the app to iTunes.
    Distribute to The devices that receive the app. You can use MaaS360 to distribute an app to devices in the following ways.
    • None
      The app is loaded in the App Catalog, but the app is not distributed to devices immediately.
    • Specific Device
      The app is loaded in the App Catalog and deployed to a specific device.
    • Group
      The app is deployed to a group of devices.
    • All Devices
      All devices receive the app.
    MaaS360 supports the following distribution options.
    • Install Automatically
      The app is automatically downloaded on devices. This option supports free and paid apps that use the Volume Purchase Program (VPP).
    • Send Email
      Use MaaS360 to send an email message to the recipient about the new app.
    • Send Notification
      Use MaaS360 to send a mobile notification to the device when a new app is available.
  5. Select the Wrapping and Signing tab and enter the following details.
    Option Description
    Apply WorkPlace Policy Select this option to enable both wrapping and signing for the app. App wrapping compiles extra code around an existing app, by providing security features that control specific app functions. For more information on app wrapping, see App wrapping overview.
    Enforce WorkPlace Encryption A wrapped app can use its own encryption for the files that it creates or downloads, which only the app itself can access. This feature makes sure that sensitive data remains safe, even if the device passcode is compromised. You can specify which files or file types remain decrypted after wrapping (for example, log files). For more information on encryption parameters, see Data encryption parameters.
    Note: If Enforce WorkPlace Encryption is not displayed in the IBM MaaS360 Portal during app wrapping, contact IBM Support to enable this feature in the Portal.
    Enable App Signing Select this option to enable app signing without app wrapping. Enter the provisioning profile, code-signing certificate, and password.
    Enable App Analytics The app reports usage statistics to the IBM MaaS360 Portal.
  6. Select the Configuration tab and enter the following details.
    Option Description
    App Config Source The source of the custom configuration attributes that are supplied to apps.
    • Config XML File
      The custom app configuration attributes are passed through an XML file.
    • Key/Value
      Enter the configuration attributes that are provided by the app developer. For these values, you can use variables such as fixed string, username (%username%), domain (%domain%), email (%email%), deviceId (%csn%), or any other custom user attributes.
  7. Select the Advanced tab and enter the following details.
    Option Description
    App Discovery Portal Enter the custom app attribute values that are supplied for the app and specify whether to display the app in the App Discovery Portal. For more information about the values for custom app attribute, see Adding apps to the App Catalog. Users can use the App Discovery Portal to request apps that are distributed to other users in the organization.
    • Not Available
      The app is not visible in the App Discovery Portal.
    • Viewing Only
      The app is visible in the App Discovery Portal.
    • Viewing & Request
      The app is visible in the App Discovery Portal for requests.
      Note: The Viewing & Request option is not available for Windows apps.
  8. Click Add.

Results

The iOS enterprise app is successfully added to the App Catalog.