Security

Posted by Charles Edge on June 24th, 2015

We have some devices that we support that are running iOS 7. But iOS 7 is old and so we can’t support every option on the platform. So what should you expect to be supported on iOS 7?

  • Open In management – Protect corporate data by controlling which apps and accounts are used to open documents and attachments
  • App Store Licensing – iOS 7 supported managing licenses via VPP; however, it was through codes that were distributed in Excel spreadsheets. Bushel supports managing VPP licenses. But we do not support managing these types of codes and therefore do not currently support VPP on iOS 7.
  • DEP. Originally, DEP was called Streamlined Enrollment – DEP enables us to automatically enroll devices during activation and we support doing so on iOS 7.
  • Open In Management was introduced in iOS 7 and so we support that feature going back to iOS 7. Because Bushel cannot manage apps on iOS 7 though, we cannot manage Managed Open In for apps.
  • Lock Screen. Bushel can control lock, wipe, reset passcodes, etc. Bushel cannot manage Activation Lock Bypass for iOS 7 as that feature is not actually available on iOS 7.
  • Custom Payloads (e.g. those created in Configurator that run alongside Bushel):
    • New User Accounts
    • Enterprise Single Sign-on
    • Per app VPN
    • AirPlay Profiles
    • Disable Cellular Data in Apps
    • Disable Airdrop
    • Disable Find My Friends
    • Disable Host Pairing
    • Disable OTA PKI Updates
    • Disable Touch IDs to unlock devices
    • Deploy fonts via profiles
    • Web Content filtering
    • Controlling AirPrint

Overall, Bushel is not as helpful for iOS 7 as it is for iOS 8 and iOS 9. But we can do a lot of the basic tasks that many environments look to us to do. Before you plan on integrating Bushel into your business processes for iOS 7 and below, we strongly recommend testing each feature to verify that the feature actually works.

Posted by Brittany Vogel on May 4th, 2015

Bushel allows you to deploy settings for Wi-Fi networks to all of your users enrolled in Bushel. Bushel supports WEP, WPA, and WPA2.

1. Log in to your Bushel account at login.bushel.com.

2. Select Settings in the blue bar of the left side of the Bushel window.

3. Click on the Network Settings tab at the top of the window.

Wi-Fi Network Settings

4. To add a Wi-Fi network, click on Create a new Network.

Wi-Fi Networks

5. In the window, enter the name of the network you would like to add.

Creating a Wi-Fi Network

6. Select the network security type from the dropdown list.

Security Options

7. After selecting the networks security type, enter the password for the network.

8. You have the option to choose to have the automatically join the network. You also have the option to select if the network is a hidden network or not.

9. After you have selected the network options and added the information to connect, click on the green ‘Create Wi-Fi’ Netowork button.

10. The network now shows up in your Wi-Fi Networks list. Click on the green ‘Update Wi-Fi Settings’ button to deploy your network configuration.

Available Wi-Fi Networks

Posted by Brittany Vogel on May 1st, 2015

The ability to erase a device can be a life saver for a company. If a phone is lost or stolen, erasing confidential data can help you feel at ease. Here is how to erase an iOS or Mac device in Bushel.

1. First, login into your Bushel account at login.bushel.com

2. Bushel opens up to the Devices page upon log in. On this page, select the device you would like to erase.

3. After you select the device, click on the grey button with three dots to the upper right of the window.

Screen Shot 2015-03-23 at 1.28.16 PM

4. Select ‘Erase Device’ from the drop down.

5. You will get a pop up that warns you that you will be erasing the device. If you would like to continue, click ‘Erase’.

Erase Unknown Host

Posted by Brittany Vogel on May 1st, 2015

FileVault2 is full disk encryption for the Mac. When you use Bushel to set up FileVault2, the recovery keys will be stored. This is handy if you forget the password to the machine and still need to get access. To learn more about FileVault2 head to Apple’s website.

1. To start, log in to your Bushel account at login.bushel.com

2. To the left of the screen, click on Settings in the blue bar.

3. At the top of the page, you will see a Device Security tab, click there.

Screen Shot 2015-04-03 at 10.08.59 AM

4. To enable FileVault2, click on the switch to the right of the Disk Encryption box. The switch should turn orange.

Screen Shot 2015-04-03 at 10.10.02 AM

5. After you turn on disk encryption, click on the green Update Security Settings button at the bottom of the page.

Screen Shot 2015-04-03 at 10.12.14 AM

6. Bushel will now send the command to encrypt the device with FileVault2.

Posted by Brittany Vogel on April 29th, 2015

With Bushel, you are able to lock both iOS devices and Mac’s from within your Bushel device page. When sending a lock command to an iOS device, the device will lock itself until the passcode to the device is entered, or you unlock the device within the Bushel device management page. Sending the lock command to a Mac will restart the Mac and lock the device on the firmware level. The only way to unlock the device is by entering the 6 digit passcode you created upon locking the device. There is no way to send an unlock command to a Mac. Once the Mac is locked, it is not able to receive any commands you may send from Bushel until you unlock it with the passcode you created.

How to lock an iOS device:

1. Login to your Bushel account at login.bushel.com.

2. On the Devices page, click on the iOS device you would like to lock.

3. To the upper right of the page, you will see a grey lock button. To lock, click the button.

Screen Shot 2015-03-25 at 10.25.27 AM

4. The device will now be sent a lock command. To unlock, the user can use their passcode for the device, or you can unlock the device by clicking on the unlock button on the device page next to the lock button.

 

How to lock a Mac:

1. Login to your Bushel account at login.bushel.com

2. On the Devices page, click on the Mac you would like to lock.

3.To the upper right of the page, you will see a grey lock button. To lock the Mac, click on the button.

Screen Shot 2015-03-25 at 1.42.38 PM

4. You will now be prompted to enter a 6 digit passcode. This passcode is used to unlock the Mac after you lock it. Once entered, click on the red lock button.

Screen Shot 2015-03-25 at 1.44.29 PM

5. Once the Mac receive the command, it will restart and show the prompt for the six digit passcode.

6. As stated above, the Mac will not receive any commands from Bushel when lock.

 

Sidenote: Device’s will not receive commands if not on Wi-Fi. Once the device does connect to Wi-Fi, it will immediately lock.