Large ios Device Deployment Checklist Dave Pugh and Calvin Clark December 9, 2011

Transcription

1 Large ios Device Deployment Checklist Dave Pugh and Calvin Clark December 9, 2011 PLANNING Wi-Fi - coverage / capacity / density - authentication (wide-open or 802.1x preferred) - Bonjour (multicast) support (AirPrint and AirPlay require this) Storage (carts? trays? closet? cabinet?) - Secure - Charging - Mobility Syncing / Updating Content - Which apps? - Which videos? - Which books? - What itunes U content? - Which podcasts? - Which epubs? - Which local wikis? - Which local podcasts? - Which websites? How much space will that content use? Configuration / Installation - done before distribution? - done by user after distribution? Configuration profiles - Wi-Fi networks - VPN - accounts - subscribed calendars - LDAP - Passcode policies - Restrictions - Webclips (and their icons)

2 Management strategy - configuration profiles only - profiles installed by IT or by user - Mobile Device Management (MDM) or Lion Server Profile Manager App purchasing strategy - Volume Purchase Program (VPP) - Are apps consumables? - Allow user to install apps? aliases - used for VPP and itunes accounts - identify process for creating aliases/groups/addresses at your school Developer Programs - Enterprise Developer Program required for MDM - Enrollment could take many weeks if there are contract/legal issues ORDERING Color - Black - White Radio - Wi-Fi only - Wi-Fi + 3G AT&T - Wi-Fi + 3G Verizon Capacity - 16, 32, or 64GB - Plan 1GB per hour of video - What apps? Some are huge (Elements is 1.7GB) Quantity - Individual boxes - 10-packs (Wi-Fi only) Factory Services - Custom engraving - Asset tagging

3 Warranty / Support - AppleCare Protection Plan - ios Direct Service Program - Order extra spare units - AppleCare Help Desk Support - AppleCare OS Support Apple Education Professional Services Accessories - Digital AV Adapter (for flat screen TVs with HDMI) - VGA adapters - Smart Covers or Third-party covers - Wireless Keyboards - ipad 2 Dock - ipad Camera Connection Kit - 3rd party accessories (ProScope Mobile, PASCO AirLink2, etc) - HDMI-to-VGA converters - Optical audio to analog converters - Apple TV for AirPlay Storage / Charging / Syncing - Bretford PowerSync Cart for 30 (H3635LL/A) - Bretford PowerSync Tray for 10 (H3634LL/A) - Computer to sync with (OS X: 30+ devices, Windows: 7 devices) Training - Apple Professional Development - District developed documents / videos Apps - VPP vouchers

4 VPP Setup Create Program Manager address - role: create / manage Facilitator accounts - quantity: one only - address can't be an existing itunes account or AppleID - should be generic - example: apple_vpp_manager@school.edu Create Facilitator address(es) - role: purchase apps on behalf of users - quantity: one or many. Usually at least one per dept, school, funding source, etc. - address can't be an existing itunes account or AppleID - should be generic - examples: - appleapps1@school.edu - hs_apps@school.edu - special-ed_apps@school.edu Apply online for VPP program enter manager to verify application - manager receiving must respond with 72 hours to verify Program Manger Create Facilitators - sign in to VPP Program Manager web portal with Program Manager account - enter address and description for each Facilitator & save Explore VPP App Store and buy apps sign in to VPP App Store web portal with Facilitator account - redeem VPP Voucher Cards - search for and buy apps - download redemption codes for purchased apps

5 WHILE YOU'RE WAITING Determine itunes account strategy (Personal / Centralized / Layered) - limit of 5 computers per itunes account - unlimited ios devices can sync to 1 computer - Usually 1 itunes account for each sync computer - Use case: carts and labs! - Usually 1 sync computer per cart / lab! - examples: hs_cart1@school.edu, science_ipads@school.edu - Use case: student 1:1! - usually 1 sync computer per IT, building, program or teacher! - examples: washington_6thgrade@school.edu or jefferson_specialed@school.edu - Use case: administrators, staff, teachers! - 1 ios device syncs with user's primary computer! - Personal account! - example: smith@school.edu, science_teacher@school.edu, john.smith@gmail.com Create address for each sync-station itunes account - must be done before creating itunes account to receive verification from Apple Create itunes sync-station accounts - itunes App Store account without a credit card: Respond to verification from Apple to activate itunes account Prepare configuration profiles - iphone Configuration Utility (ipcu) - Prepare spacious unboxing and configuration area - computer lab? - firewalls / filters not blocking itunes servers - current version of OS X and itunes - determine name and address to register each device - itunes activation-only mode Prepare sync station(s) - firewalls / filters not blocking itunes servers - current versions of Mac OS X and itunes - preload current ios software restore file (~/Library/iTunes/iPad Software Update/) - preload previous backups? (~/Library/Application Support/MobileDevice/Backup/) - preload content in library - BackupsDisabled mode

6 SET UP NEW ios DEVICES Use case: carts and labs and student 1:1 - Sign into itunes account on sync-station - Set BackupsDisabled mode on sync-station - Attach 1 device with USB cable - Activate 1 device - Register that device - Update to ios 5 on device if it s not already there. Subsequent updates on device. - Create template device (install apps, books, web clips, etc) - Configure fake account (if blocking account changes) - Configure device PIN - Set Restrictions! - Disable installing Apps! - Disable Allow Changes: Accounts (if appropriate)! - Disable In-App Purchases! - Set ratings limitations as appropriate! - (most other restrictions settable through configuration profiles) - Rename device - Install configuration profiles using ipcu or using /web delivery - Backup template device on sync-station (right-click on device on left side of itunes) - Attach all other devices - - Update to ios 5 on devices if it s not already there. Subsequent updates on devices. - Register devices - Restore devices from template backup - Install any configuration profiles that weren't included in backup/restore - Devices are synced with content on cart Mac - Only re-connect device with the same sync-station to sync additional content - NOTE: personal content may be lost if device is re-attached to sync-station (due to restores, etc) Use case: administrators, staff, teachers (managed individually, with MDM) - Distribute devices with instructions for MDM binding and other training materials - Have users download a free app (establishes device-specific key with app store) - Distribute VPP codes for school-purchased apps (MDM, , spreadsheet, wiki, web page) - Only re-connect device with the user's primary sync computer - Instruct users to sign in with personal Apple ID for icloud document storage and backups

7 Use case: administrators, staff, teachers (managed centrally) - Sign into itunes account on sync-station - Attach 1 device with USB cable - Do not register / sign in to / activate device (allows easy personalization later) - Update to ios 5 on device if it s not already there. Subsequent updates on device. - Create template device (install apps, books, web clips, etc) - Re-name device - Install configuration profiles using ipcu or using /web delivery (can t do this if unpersonalized) - Backup template device on sync-station - Attach all other devices - Register devices - Update to ios 5 on devices if it s not already there. Subsequent updates on devices. - Restore devices from template backup - Install any configuration profiles that weren't included in backup/restore (can t do this if un-personalized) - Devices are synced with content on cart Mac - Only re-connect device with the same sync-station to sync additional content and create backups - Instruct users to sign in with personal Apple ID for icloud document storage and backups - Instruct users on how to sign out of app store on device and sign in with their itunes account (if desired) - NOTE: personal content may be lost if device is re-attached to sync-station (due to restores, wrong itunes account, etc) - using icloud prevents this Use case: administrators, staff, teachers (managed individually, no MDM) - Launch iphone Configuration Utility (to log serial numbers, MAC addresses, etc) - Attach device - Enter any identifying information for the device in ipcu - Update to ios 5 on device if it s not already there. Subsequent updates on device. - Turn off-device if distribution is not soon - Distribute devices with instructions for configuration profile installation and other training materials - Have users attach device to their primary computer they'll use for syncing - Have users download a free app (establishes device-specific key with app store) - Distribute VPP codes for school-purchased apps ( , spreadsheet, wiki, web page) - Only re-connect device with the user's primary sync computer - Instruct users to sign in with personal Apple ID for icloud document storage and backups