About USB Restricted Mode in iOS 11.4.1 & above

Created: Knowledge Base

Starting with iOS 11.4.1, Apple has introduced a new security feature called USB Restricted Mode that will impact some GroundControl users. Apple has additional information in this knowledge base article. Devices that are locked with a passcode, and have not been unlocked in the last hour, will not respond to USB requests. Apple says that in some cases, locked devices … Read More

Skip the “Privacy” setup screen in iOS 11.3

Created: Modified: Knowledge Base

iOS 11.3 includes a new setup screen, called “Privacy.” If you are using DEP devices, this new screen will likely interrupt your otherwise automated workflows. With DEP devices, your MDM determines which setup screens to skip. The DEP profile in your MDM lists each screen, and whether to show or skip. Unfortunately, most MDM systems have not yet been updated to include … Read More

Assign Staged Device to User using AirWatch API

Created: Modified: Knowledge Base

If you are using an AirWatch MDM with API integration, you may instruct GroundControl to assign staged devices to individual users. End-User passwords are not needed for this action, only usernames. Say you have 1,000 iPhones to assign to 1,000 employees. You have several options to proceed: You may leave the devices untouched, and let End-Users activate devices with Apple’s … Read More

Assign DEP Profile using AirWatch API

Created: Modified: Knowledge Base

If you are using an AirWatch MDM with API integration, you may instruct GroundControl to assign DEP devices to a specific DEP profile. The popup menu displays a list of DEP profiles from your AirWatch server. If the list is out of date, click the “Resync” button. This feature is helpful when your organization has multiple DEP profiles, and the … Read More

Disable MDM Profile Encryption

Created: Knowledge Base

MDM systems configure iOS devices by sending configuration profiles. These profiles contain information such as restrictions (e.g. "Minimum 6-character passcode") and settings (e.g. "WiFi SSID and passcode XYZ"). These profiles may be tranmitted to devices in plain text, or with encryption. We have observed issues with GroundControl and MDM-encrypted profiles. These issues include: Deployments fail when restoring from a backup, with the ... Read More

Best Practices for Clinical iPhones

Created: Knowledge Base

Here are several best practices and considerations for using GroundControl in a critical, clinical setting. This may include nursing communications (Voalte, Mobile Heartbeat, Vocera), secure texting and alarms, and medication safety (Epic Rover, Patient Safe). Ideally, you can use GroundControl to make device setup as close to zero touch as possible. This includes: Enroll in DEP and VPP DEP Profile … Read More

DEP devices and “Manage with GroundControl”

Created: Modified: Knowledge Base

Before GroundControl 3.5, we permitted you to treat DEP devices as non-DEP devices, simplifying your workflows. Beginning with GroundControl 3.5, however we are enforcing several new constraints. DEP devices must now use DEP workflows. So if you see the following failures: Failed: The device is registered for DEP. Please use one of GroundControl’s DEP workflows instead. Failed: The device is not … Read More

Restoring from Backup with DEP

Created: Modified: Knowledge Base

GroundControl can restore from a master backup onto DEP devices, and MDM enrollment will be preserved. Previously, GroundControl would restore only app settings from the backup, ignoring any system settings. But if you carefully prepare the backup and use devices running iOS 10.3 or later, GroundControl can restore both app and system settings. You need to have GroundControl’s supervision identity added to your … Read More

Improve Reliability with Certain Hardware

Created: Knowledge Base

To improve reliability with certain hardware — including sleds from Infinite Peripherals — GroundControl requires a custom option in your workflow. In your workflows, add the action “Set Custom Option”. Paste the following text into the dialog: { “EnableIncreasedFaultTolerance”: true } This option should be added to each workflow you will use with the hardware.

Running tethered-caching at startup

Created: Modified: Knowledge Base

In macOS 10.13 "High Sierra," tethered caching has been renamed "Content Caching." But the functionality is the same: your Mac will route network activity from USB device and also cache App Store apps locally on the Mac. This is a great feature and we highly recommend using it. Setup is extremely simple: Open your Mac's System Preferences, then Sharing. Check the ... Read More